Global digital policy roundup: June 2026’s biggest moves

Digital policy moved fast in June 2026, with governments across four continents pushing new rules on artificial intelligence, platform liability, and data sovereignty that could reshape how billions of people use the internet.

AI regulation tightens in Europe and Asia

The EU’s AI Act enforcement office handed down its first major penalty this month — a €38 million fine against a German recruitment software firm for deploying a hiring algorithm that regulators said discriminated against non-native speakers. It’s the sharpest signal yet that Brussels isn’t treating its landmark law as a paper tiger. Meanwhile, South Korea finalized its own AI Framework Act, setting mandatory human oversight requirements for high-risk systems in finance and healthcare, effective January 2027. Japan, not to be outdone, released draft guidelines calling for AI developers to register large language models above a certain compute threshold with a new national registry.

Platform liability battles intensify in the US and Brazil

Section 230 reform crept forward again in Washington. A Senate Commerce Committee vote advanced the PLATFORM Act, which would strip liability protections from algorithmically amplified content — a distinction that sounds narrow but could fundamentally change how recommendation engines work. But the bill still faces a difficult path in the full Senate, where tech lobbyists have spent over $140 million this year alone fighting it. Brazil’s digital platform regulation law, passed in April, began drawing its first compliance deadlines in June. Platforms with more than 10 million monthly active Brazilian users must now submit quarterly transparency reports to the national telecommunications agency, ANATEL.

Data sovereignty becomes a dealbreaker

India’s Digital Personal Data Protection rules, which kicked in fully this spring, are already causing headaches for multinational companies. At least 23 foreign firms publicly disclosed in June that they’re relocating data processing infrastructure to Indian servers to comply. The cost of non-compliance — fines up to ₹250 crore per violation — appears to be concentrating minds.

And it’s not just India. Nigeria and Kenya both announced bilateral data-sharing agreements this month that explicitly exclude third-country transfers to the United States and the EU, a sign that the Global South is increasingly writing its own rules rather than waiting for Western frameworks to trickle down.

What officials are saying

“We are no longer in a period of experimentation,” said a senior official at the OECD’s digital economy directorate during a Geneva briefing on June 18. “Countries that haven’t built enforcement capacity are going to find themselves left behind.”

That warning feels urgent. With the G20 digital ministers’ summit scheduled for September in Johannesburg, the next 90 days will determine whether the patchwork of national rules starts stitching itself into something coherent — or fragments further into a genuine regulatory maze that nobody, not companies, not users, not governments, can navigate cleanly.