EU AI Act Transparency Enforcement Starts Sunday & South Carolina Adds Personal Liability (07/31/2026)

Two deadlines and a warning today. Europe’s transparency rules arrive Sunday, which means every organization running a customer-facing chatbot has a weekend to answer a question it may not have asked. South Carolina went further than most states by attaching personal liability to employees. And a careful reading of the border phone case suggests the story circulating about it is not quite the story the court is deciding.

Top 5 Critical Privacy Alerts

1. EU AI Act Transparency Rules Take Effect Sunday

The European Commission confirmed that EU AI Act enforcement begins Sunday, August 2, when the Act’s transparency rules start to apply, requiring chatbots and other interactive AI systems to identify themselves as AI (Global Privacy Watch). The same obligations require labeling for AI-generated images, audio, and text made to look authentic (The Guardian). Disclosure is the modest end of AI regulation, and it lands on far more organizations than the high-risk provisions everyone has been watching.

Operator Note: If you serve European users, inventory every AI-driven interface a customer can reach, including support chat and voice systems, and confirm each one discloses that it is AI. Also check whether any marketing content you generate falls under the labeling rules.

2. South Carolina Attaches Personal Liability to Its Design Code

South Carolina’s Age Appropriate Design Code Act combines prescriptive privacy-by-design controls with audit requirements, parental controls, restrictions on targeted advertising, and personal liability for employees (Sidley Data Matters). Personal liability changes the internal conversation about compliance, because a requirement that can reach an individual employee gets attention that a corporate fine never quite produces.

3. A Closer Read of the Border Phone Case

A detailed analysis examines what the Tunick border case actually turns on, after federal agents forced a man to unlock his phone and the device self-destructed using a privacy feature (PogoWasRight). The version circulating in privacy circles has a cleaner shape than the record supports, and the details matter for anyone deciding how to configure a device before travel.

4. Minors’ Privacy Legislation Keeps Accelerating

A mid-year review catalogs a busy 2026 for children’s and teens’ privacy legislation across states and at the federal level, including two distinct approaches to app marketplace laws (Inside Privacy). Any service that a minor could plausibly use is now subject to a patchwork that varies by state on age verification, defaults, and advertising.

5. EFF Says Amending California’s AB 1709 Does Not Fix It

EFF argues that recent amendments to California’s AB 1709 leave the core problem intact, because the bill still bans social media access for people under 16 and still threatens the privacy and First Amendment rights of all Californians (EFF). Age limits require age verification to enforce, and verifying everyone’s age means collecting identity data from adults to keep minors out.

Additional Privacy Alerts

Regulation

• The SCREEN Act’s Reach Extends Past Adult Sites: EFF warns that the SCREEN Act’s age-verification requirements would affect privacy across a far wider range of services than the adult websites it targets. EFF

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.