Two Marines have filed a class-action lawsuit against the Pentagon, alleging that the Defense Manpower Data Center suffered a data breach that the Department of Defense could have prevented by addressing known cybersecurity vulnerabilities.
Weekly Editorial Analysis from Experts and Editors
Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.
The conclusion remains. The expert may not.
The FBI breach exposes a flaw in how we think about stolen data. For some people, stolen data is not about credit. It is a matter of life and death.
Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.
The Electronic Frontier Foundation has laid out a state-level legislative agenda targeting Automated License Plate Readers, which law enforcement agencies nationwide use to log vehicle locations, timestamps, and GPS data. The EFF argues that AI advances and interstate data sharing have turned these once-isolated tools into a de facto national vehicle tracking network.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · Cybersecurity · General readers · Policy
Germany's Berlin Data Protection Authority has ruled that four major political parties — the SPD, Greens, Die Linke, and CDU — illegally used microtargeting during the 2021 federal election, following complaints filed by privacy group noyb. A separate complaint against the AfD remains open after the party challenged the regulator's investigative authority in court.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy
London's Metropolitan Police deployed live facial recognition technology at a Premier League match between Chelsea and Tottenham, scanning crowds in real time. The deployment represents another step in the force's expanding use of the technology at public events.
Who should care: AI governance · Lawyers · Administrators · Privacy officers · Cybersecurity · General readers · Policy
The Apple Watch Ultra 4 brings a longer battery life, an updated chip, and improved health tracking tools, but several features announced alongside the device are not yet active and will arrive in software updates later in the year. The watch retails at $799 in the US.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
Legislators from both parties are advancing bills that would cut federal funding for AI-powered surveillance systems like Flock, and require data centers to bear more of their own energy costs rather than passing them to the grid or taxpayers.
Who should care: AI governance · Lawyers · Administrators · Privacy officers · Cybersecurity · General readers · Policy
The US government has moved to block two devices found to contain surveillance chips manufactured in China. The action reflects ongoing federal concern about foreign-made components that could enable data collection or monitoring within US networks.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
The banned items — a wireless video transmitter and dashboard camera — are made with chips manufactured by Huawei subsidiary HiSilicon, which markets its products as “designed for the surveillance market.”
Who should care: Privacy officers · Cybersecurity · General readers · Policy
The Dutch Data Protection Authority has fined Uber approximately 825 million euros for violating GDPR rules on automated decision-making and failing to properly inform drivers about how profiling data was used against them.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · Cybersecurity · General readers · Policy
A Georgia man has filed a lawsuit against Flock Safety and a local sheriff's office, alleging that automated license plate reader cameras were used to track and monitor him without a warrant, reportedly in retaliation for a prior excessive force lawsuit he brought against the department.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity
Legal scholar Matt Tokson presented on AI surveillance as part of the Scaling Laws Roadshow series hosted at Nebraska Law. The event appears to focus on how artificial intelligence intersects with surveillance law and policy.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
Flock Safety CEO Garrett Langley appeared at TechCrunch Disrupt to defend his company's license plate reader and surveillance network technology, arguing that its role in fighting crime justifies continued expansion despite rising concerns about privacy and potential misuse.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
California Governor Gavin Newsom signed a package of privacy bills at the close of the state's 2026 legislative session, covering consumer rights, data broker rules, platform design, and website tracking lawsuits. He also vetoed at least one measure that would have placed broader limits on the sale and sharing of personal data.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
Clearview AI is in a dispute with the UK's Information Commissioner's Office over how the company's facial recognition technology should be classified and regulated. The disagreement centers on whether Clearview's system constitutes monitoring under UK data protection law.
Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy
The EFF and ACLU of Wisconsin have petitioned the state Supreme Court to require law enforcement to obtain a warrant before searching automated license plate reader databases. The case involves ALPR systems operating in Milwaukee, Racine, Kenosha, and Green Bay, and is brought on behalf of a religious organization and an individual pastor.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity
The United States has moved to block two devices containing surveillance chips manufactured in China, according to Reuters. The action appears aimed at limiting the reach of Chinese-made components that could enable surveillance within U.S. networks or infrastructure.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
Australian employers are increasingly using AI-powered monitoring tools — including CCTV, keystroke tracking, and surveillance cameras — to watch workers across industries from fast food to office work, often without telling employees it is happening. The Human Technology Institute has called for stronger workplace privacy protections in response.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
Norway's data protection authority has fined Xandr, now owned by Microsoft, €8.5 million for GDPR violations tied to its processing of personal data from users of the dating app Grindr. The case was originally brought in 2020 by privacy group noyb and the Norwegian Consumer Council.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy
The European Data Protection Board has adopted a formal statement on smart glasses, accompanied by a report examining how the devices affect personal data protection, privacy rights, and surveillance. The move reflects growing concern among EU regulators as smart glasses become more common consumer products.
Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy
AI security incidents accelerate global regulatory response IAPP
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
WIRED spoke with the founders of the Aged Intelligence Society, a fast-growing events startup that brings women together to “solve midlife problems using frontier tools.”
Who should care: General readers · AI governance · Policy
Comcast plans job cuts and more AI agents for its shrinking cable customer base.
Who should care: General readers · AI governance · Policy
The OECD is examining whether investors are prepared to treat trustworthy AI as a material business factor rather than a peripheral governance concern. The framing suggests a shift in how financial stakeholders are expected to weigh AI accountability in investment decisions.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Political scientist Thessalia Merivaki discusses what conditions help voters resist AI-generated misinformation, addressing the growing challenge of maintaining informed electorates in an environment of synthetic and manipulated content.
Who should care: General readers · AI governance · Policy
Navigating the ghosts in the machine: Liability, governance lessons from recent AI hallucination cases IAPP
Who should care: General readers · AI governance · Policy
OpenAI resumes frontier AI training with enhanced security, no internet access Reuters
Who should care: General readers · AI governance · Policy
Lawmakers this week took aim at foreign efforts to create knockoff copies of U.S.-made AI models and AI’s capability to influence voting.
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [...]
Who should care: General readers · AI governance · Policy
The goal is for AI to automatically analyze refueling operations from cameras mounted on the tankers and provide “hot wash” feedback to the tanker crews.
Who should care: General readers · AI governance · Policy
An old idea springs anew as a chorus of influential voices predicts that AI may trigger crises of vast magnitude In a preface to his book Capitalism and Freedom, the American economist Milton Friedman famously observed that a crisis can propel once-fringe ideas into the political mainstream. “Only a crisis – actual or perceived – produces real change. When that crisis occurs, the actions that are taken depend on the ideas that are lying around,” he wrote. The job of intellectuals, thinktanks and economists, he argued, is to refine the quality of these ambient ideas, so that good ones are read…
Who should care: General readers · AI governance · Policy
EU member states have approved a change to GDPR that would make personal data processing automatically lawful when it occurs 'in the context of AI,' according to reports. Critics, including privacy advocate Max Schrems, say the provision would let major AI companies use decades of collected personal data with few restrictions.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
Governments around the world are rushing to implement safety measures after AI technology found 'severe' vulnerabilities in a key programming language called PHP.
Who should care: General readers · AI governance · Policy
So-called kill switch proposals are politically popular, but critics raise concerns about implementation and U.S. competitiveness.
Who should care: General readers · AI governance · Policy
Indian workers are being paid to film themselves at work and the footage is used to train AI.
Who should care: General readers · AI governance · Policy
London's Metropolitan Police deployed live facial recognition technology at a Premier League match between Chelsea and Tottenham, scanning crowds in real time. The deployment represents another step in the force's expanding use of the technology at public events.
Who should care: AI governance · Lawyers · Administrators · Privacy officers · Cybersecurity · General readers · Policy
Legislators from both parties are advancing bills that would cut federal funding for AI-powered surveillance systems like Flock, and require data centers to bear more of their own energy costs rather than passing them to the grid or taxpayers.
Who should care: AI governance · Lawyers · Administrators · Privacy officers · Cybersecurity · General readers · Policy
Australia has proposed legislation that would require social media platforms to give users the ability to turn off algorithmic content recommendations. The measure targets the systems that decide what content people see beyond accounts they actively follow.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
Cryptographer Matthew Green has launched a site that estimates the total research effort spent analyzing major public-key cryptographic algorithms, drawing on roughly sixteen thousand papers to convert published cryptanalysis into approximate researcher-years per algorithm.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
Microsoft President Brad Smith called for stronger AI regulation, arguing the technology is subject to fewer rules than everyday consumer goods. He backed proposals including kill switches for AI systems and legal liability protections for people harmed by rogue AI agents.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Ireland's Data Protection Commission has published guidance pointing people toward resources on AI regulation in the country.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy · Privacy officers
The Electronic Frontier Foundation is using DAF Day — a fundraising moment centered on donor-advised funds — to solicit charitable grants in support of its work on privacy, encryption, AI, and digital rights.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
Republican lawmakers responded to comments made by President Trump regarding the Supreme Court. The excerpt also references a separate thread about how artificial intelligence systems misread or misrepresent how the Court works.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
At a United Nations meeting, the United States and China presented competing visions for how artificial intelligence should be governed internationally. President Trump signaled U.S. opposition to global AI security frameworks, even as other world leaders pushed for coordinated action.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Recent changes to the EU AI Act's literacy requirements may create additional compliance burdens rather than making it easier for organizations to meet the law's obligations. The adjustment, intended to clarify what companies must do to ensure AI competency, appears to be generating new uncertainty instead.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
France's data protection authority CNIL has released survey results examining how the role of Data Protection Officers is evolving as artificial intelligence becomes a bigger part of organizational life. The findings offer a snapshot of how DPOs are adapting to AI-related responsibilities.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
Progressive and left-leaning voices broadly support regulating AI but are divided on the urgency of risks and what regulation should actually do. The disagreement reflects deeper tensions about how to weigh near-term harms against longer-term or speculative dangers.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
The Massachusetts Attorney General has reached a settlement with Transformative Healthcare over alleged violations of HIPAA and MassHealth fraud rules. The case involves a healthcare provider facing both federal privacy law and state Medicaid program allegations.
Who should care: Healthcare professionals · Privacy officers · Compliance · Lawyers
The Trump administration is pushing to integrate AI into Medicare, a move that is drawing scrutiny over how patient health data will be used and protected. The initiative affects one of the largest government health programs in the country, covering tens of millions of older and disabled Americans.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Freedom of information responses show that many NHS trusts across England are declining to use Palantir's £330 million federated data platform, with health officials saying existing or alternative systems perform just as well or better. Some trusts have reported genuine benefits, including improved waiting list and surgery scheduling management, but adoption is far from uniform.
Who should care: Healthcare professionals · Privacy officers · Compliance
A patient attempting to opt out of health data sharing through MyChart and a major hospital encountered significant obstacles, including misinformation from staff, a notary requirement, and a hospital that reportedly failed to follow its own stated policies.
Who should care: Healthcare professionals · Privacy officers · Compliance
The US Army is moving to address a policy that has blocked military parents from accessing the medical records of their teenage children, ages 13 to 18. The barrier has created friction for families navigating healthcare within the military system.
Who should care: Healthcare professionals · Privacy officers · Compliance
Senior Democratic lawmakers on the House and Senate Veterans' Affairs committees are pressing the Department of Veterans Affairs to explain why its electronic health records modernization contract grew from its original value to roughly $17 billion, calling the agency's stated rationale of 'unanticipated complexities' insufficient.
Who should care: Healthcare professionals · Privacy officers · Compliance
The Senate passed the Health Care Cybersecurity and Resilience Act by unanimous consent, a bipartisan measure designed to help hospitals and healthcare providers improve their cybersecurity defenses and better protect patient data.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
A cyberattack on a Polish healthcare software provider resulted in the theft of patient personal data, continuing a recent pattern of attacks targeting the country's medical sector.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Quest Diagnostics, a Secaucus, New Jersey-based Fortune 500 diagnostic testing company, has notified the U.S. Securities and Exchange Commission (SEC) […] The post Patient Data Likely Accessed in Quest Diagnostics Hack appeared first on The HIPAA Journal.
Who should care: Healthcare professionals · Privacy officers · Compliance
A user of MyChart, the widely used patient portal, found that while the platform offered an opt-out from health data sharing, actually completing that opt-out was a confusing and frustrating process.
Who should care: Healthcare professionals · Privacy officers · Compliance
More than 44,000 people in the UK have filed formal legal objections to NHS England's Federated Data Platform, which is built on Palantir technology, demanding it be blocked from processing their personal health data. The campaign has grown alongside broader criticism of Palantir's ties to Israeli military operations and its work supporting ICE deportation efforts in the United States.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy
Changes to the login process for the Military Health System portal have left military spouses unable to access their own medical records and those of their children. The authentication update appears to have created access barriers for dependents of service members.
Who should care: Healthcare professionals · Privacy officers · Compliance
EU member states have approved a change to GDPR that would make personal data processing automatically lawful when it occurs 'in the context of AI,' according to reports. Critics, including privacy advocate Max Schrems, say the provision would let major AI companies use decades of collected personal data with few restrictions.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
Clearview AI is in a dispute with the UK's Information Commissioner's Office over how the company's facial recognition technology should be classified and regulated. The disagreement centers on whether Clearview's system constitutes monitoring under UK data protection law.
Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy
New Mexico Attorney General Raúl Torrez issued a public warning to the AI and tech industry following a $25 billion ruling against Meta, calling it a starting point rather than a conclusion. Torrez urged other state attorneys general to pursue similar litigation rather than settle.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
The European Data Protection Supervisor held a half-day workshop called ARETE in June 2026, focused on how to assess the risk that personal data breaches pose to the individuals whose data is exposed.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
AI systems that generate false information about real people may create legal obligations under GDPR, which requires that personal data be accurate. The piece examines how hallucinated outputs about individuals fit within that framework.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
The European Data Protection Board has adopted a formal statement on smart glasses, accompanied by a report examining how the devices affect personal data protection, privacy rights, and surveillance. The move reflects growing concern among EU regulators as smart glasses become more common consumer products.
Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy
NICCS, a U.S. government cybersecurity training resource, is offering a workshop aimed at helping businesses implement compliance with major global data privacy regulations, including GDPR and CCPA.
Who should care: Lawyers · Privacy officers · AI governance · Compliance · General readers · Policy
The UK's Information Commissioner's Office has taken formal action against the Metropolitan Police Service for failures in how it manages information. The nature of the specific failures and the form of the ICO's action are not detailed in the available information.
Who should care: Lawyers · Privacy officers · AI governance
EPIC submitted formal comments to the Vermont Attorney General on two proposed rules designed to implement Vermont's Age-Appropriate Design Code, which sets design and data protection standards for online products likely to be accessed by children.
Who should care: Lawyers · Privacy officers · Compliance
President Trump publicly criticized the Supreme Court on social media, while Attorney General Todd Blanche indicated the administration is planning further action on mail-in voting.
Who should care: Lawyers · Privacy officers · Compliance
The U.S. Supreme Court blocked a Trump executive order on mail-in voting, prompting the president to publicly criticize the justices. Attorney General Blanche responded by saying Trump should communicate his concerns through proper channels rather than public attacks.
Who should care: Lawyers · Privacy officers · Compliance
Privacy advocacy group noyb reviewed more than 1,000 amendments proposed by Members of the European Parliament on the GDPR and ePrivacy Directive, as part of an effort to track where individual MEPs stand on proposed changes to EU privacy law under the so-called Digital Omnibus package.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
Washington Gastroenterology has agreed to a $4.6 million settlement to resolve a class action lawsuit arising from a cybersecurity incident at the medical practice. The settlement follows litigation brought by patients affected by the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Connecticut Attorney General William Tong settled with Frontier Communications for $625,000 following an investigation into an April 2024 data breach carried out by ransomware group RansomHub, which exposed sensitive personal information belonging to Frontier customers.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
California's attorney general reached a $6 million settlement with 23andMe's successor company over claims that 23andMe failed to adequately secure customer data before a breach in 2023. The settlement resolves state allegations tied to the company's cybersecurity practices at the time of the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Two Marines have filed a class-action lawsuit against the Pentagon, alleging that the Defense Manpower Data Center suffered a data breach that the Department of Defense could have prevented by addressing known cybersecurity vulnerabilities.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The UK's Information Commissioner's Office reprimanded two Welsh organisations after a cyber-attack exposed personal information belonging to children. Weak passwords, including 'Password1,' were cited as a contributing factor in the security failure.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance
Nikkei Inc. has disclosed a third data breach within roughly a month, with the latest incident exposing approximately 1.83 million personal records. The repeated breaches at the Japanese media and financial information company point to persistent security problems rather than a single isolated incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
A bill connected to Anthropic was reportedly leaked, drawing attention from The Washington Post. Details of the bill's contents and the circumstances of the leak have not been disclosed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
WhatsApp's public help pages briefly exposed roughly 80 documents containing internal instructions for Meta's chatbot, including guidance on restricted topics. Meta attributed the exposure to a bug.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The Federal Trade Commission is reportedly investigating Anthropic and OpenAI, according to a new report. The probe comes as the Trump administration has publicly dismissed concerns about AI risks, and potential fines could be comparable to penalties levied on companies that fail to promptly disclose data breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · AI governance · Policy
Greece's data protection authority ruled against the Ministry of Social Cohesion and Family Affairs following a large-scale personal data breach, finding violations across multiple GDPR articles including security, breach notification, and data protection by design. The ministry's processor, E.E.T.A.A. S.A., was also implicated in the decision, which resulted in fines and a compliance order.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
Citizen Lab at the University of Toronto says an Israeli advertising company called Discover-Tech has been using online ads to silently deploy spyware on targeted devices, requiring no action from the user. Researchers believe dozens of devices at Al Jazeera were compromised through this method.
Who should care: Cybersecurity · Privacy officers · Administrators
Sheppard Mullin, a major U.S. law firm, is facing a class action lawsuit after disclosing a data breach. The suit follows the firm's public acknowledgment that client or personal data was compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The Electronic Frontier Foundation has laid out a state-level legislative agenda targeting Automated License Plate Readers, which law enforcement agencies nationwide use to log vehicle locations, timestamps, and GPS data. The EFF argues that AI advances and interstate data sharing have turned these once-isolated tools into a de facto national vehicle tracking network.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · Cybersecurity · General readers · Policy
A health data privacy lawsuit against Humana, brought by the law firm Schlichter Bogard on behalf of plaintiffs, has been cleared to move forward. The case involves allegations related to how the major health insurer handled personal health data.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · General readers · Policy
Germany's Berlin Data Protection Authority has ruled that four major political parties — the SPD, Greens, Die Linke, and CDU — illegally used microtargeting during the 2021 federal election, following complaints filed by privacy group noyb. A separate complaint against the AfD remains open after the party challenged the regulator's investigative authority in court.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy
Texas Attorney General Ken Paxton has sued OpenAI and CEO Sam Altman, alleging the company falsely marketed ChatGPT as safe while causing harm to Texas residents, including children.
Who should care: Lawyers · Privacy officers · Compliance
The Department of Health and Human Services has officially announced, through the Federal Register, that HIPAA civil monetary penalties will not be adjusted for inflation in 2025. The penalty caps remain at their current levels.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
The U.S. General Services Administration has introduced a contract clause aimed at preventing vendor lock-in in AI procurement, but observers note that writing the rule is the easy part — actually enforcing it is another matter.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
A U.S. court has ordered Meta to pay $25 billion following a lawsuit brought by New Mexico over the Cambridge Analytica scandal. The state alleged that Meta misled users about how their personal data was being collected and shared.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A Swedish appeals court has convicted and fined a former national security adviser on charges of gross negligence. The case stems from conduct serious enough to reach the appellate level, though specific details of the underlying act were not disclosed in available reporting.
Who should care: Lawyers · Privacy officers · Compliance
A federal judge dismissed a sexual abuse lawsuit filed by Ann Altman against her brother, OpenAI CEO Sam Altman, ruling that she had refused to submit to an independent medical examination despite being warned the case would be dropped if she did not comply. Sam Altman has denied the allegations, which alleged repeated abuse occurring more than two decades ago.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
Norway's data protection authority fined Xandr, the Microsoft-owned ad tech company, €8.6 million for unlawfully processing personal data, including sensitive categories. The case began with a 2020 complaint from the Norwegian Consumer Council and centered on violations of GDPR's core rules on lawful basis and special-category data.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
A UK NHS trust has now dismissed 15 staff members for improperly accessing the medical records of the three victims killed in the 2023 Nottingham stabbings. The dismissals follow an investigation into unauthorized record access linked to the high-profile case.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
The League of Women Voters, EPIC, and LULAC have sued the Trump-Vance administration over what they describe as a secretive and unlawful effort to gather sensitive personal data on millions of American voters into a centralized national database.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy