PrivacySignal
Enforcement

Azul Vision Settles HIPAA Right of Access Case for $50,000

HIPAA Journal · · US Federal · Enforcement

The HHS Office for Civil Rights has reached a $50,000 settlement with Azul Vision over a HIPAA right of access violation, marking the agency's ninth financial penalty in this enforcement area.

Why this matters: HIPAA gives patients a specific right: ask for your medical records and get them. When providers drag their feet or refuse, OCR can fine them. Azul Vision is the ninth case in this enforcement push, which means the pattern is intentional. If you have ever struggled to get your own health records, this is the rule that is supposed to protect you. Settlements like this are the only real pressure that makes providers take it seriously.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Enforcement
EDPB · · EU

Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements

Italy's data protection authority fined telecom operator Wind Tre €16.7 million for unlawful telemarketing practices and multiple violations of GDPR, including failures around lawful processing, transparency, the right to object, and data protection by design. The decision was finalized on June 5, 2026.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →
Enforcement
CyberScoop · · US Federal

Your AI agent is only as safe as the packages it downloads

NVIDIA has released an agent safety platform designed to enforce controls over the packages and dependencies that AI agents pull in during operation. The platform positions enforcement at the point where external code enters the system, though its effectiveness depends on the quality of what it allows through.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
noyb (None of Your Business) · · EU

Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million

Norway's data protection authority has fined Xandr, now owned by Microsoft, €8.5 million for GDPR violations tied to its processing of personal data from users of the dating app Grindr. The case was originally brought in 2020 by privacy group noyb and the Norwegian Consumer Council.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Cybersecurity · General readers · Policy

#enforcement#gdpr#surveillance#privacy Read original →
Enforcement
IAPP · · International

Washington's attorney general reflects on state's privacy legislation and enforcement

Washington State's attorney general has spoken publicly about the state's consumer privacy law and how it is being enforced. The remarks offer a look at how one of the more active state-level privacy offices views its own record and priorities.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#state-privacy#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines BBVA EUR 5 508 000 for failing to respect a customer’s objection to direct marketing

Italy's data protection authority fined BBVA's Italian branch over 5.5 million euros after the bank continued direct marketing to a customer who had formally objected to it. The decision cites violations of GDPR principles covering data processing, transparency, the right to object, and controller accountability.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
EDPB · · EU

Italian DPA fines security company EUR 39 000 for violations concerning employees’ data

Italy's data protection authority fined security firm La Patria S.p.A. €39,000 following an employee complaint. The violations involved failures to provide transparent privacy information and blocking workers from accessing their own personal data.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#privacy Read original →