Data Bytes 67: Your EMEA Data Privacy Update for July 2026

Ashurst Perkins Coie reports that on 14 June 2026, the UAE Artificial Intelligence and Data Authority was formally established[1]. The firm said the new authority "could prove to be a real turning point for the onshore PDPL"[1].According to the firm, noyb warned on 29 June 2026 that the US Supreme Court's decision in Trump v. Slaughter undermines the legal foundation of the EU-US Data Privacy Framework[1]. The update says noyb has indicated it will file a lawsuit seeking annulment of the DPF by the CJEU[1].The firm reports that on 8 July 2026, the EDPB adopted guidelines on processing personal data through blockchain technologies[1]. Kasowitz LLP separately reported that the EDPB issued draft guidance on anonymization and web scraping for generative AI[2].In the UK, Ashurst Perkins Coie reports that the ICO published its 'Edtech examined' report on 24 June 2026, based on audits of 28 edtech providers[1]. According to the firm, providers reportedly accepted and implemented 98% of the 596 recommendations made[1].The firm also reports that on 3 July 2026, the ICO published advice for small retail businesses on lawfully using CCTV footage and, where justified, facial recognition[1].The update states that in the UK, "children's online safety continues to dominate the agenda"[1].