PrivacySignal
GDPR / Intl

Online bookies accused of UK privacy breaches with use of cookie banners

The Guardian — Privacy · · International · GDPR & International

A study found that 86% of licensed UK gambling websites appear to be violating GDPR by nudging users toward accepting tracking, and in many cases harvesting data before any consent is given. The research accuses the industry of widespread non-compliance and what it describes as systematic data surveillance of customers.

Why this matters: Gambling sites know a lot about you already. Add tracking data and they know more: your habits, your hours, how often you come back. These are not neutral facts. They can be used to target people at vulnerable moments. GDPR was supposed to stop companies from collecting that data before you say yes. Most of these sites apparently did it anyway. That is not a technicality. It means real people had their behavior recorded without meaningful choice, and the companies collecting it faced no real consequence for doing so.

Who should care: Lawyers · Privacy officers · AI governance · Compliance · Cybersecurity · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

GDPR / Intl
S Slaughter and May · · International

How to address the overlap between competition and data privacy laws? The EC and EDPB seek views (via Passle)

The European Commission and the European Data Protection Board are jointly seeking input on how competition law and data privacy law should interact where they overlap. The consultation signals growing regulatory interest in treating data as both a market power issue and a rights issue.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
noyb (None of Your Business) · · EU

AI: EU Member States approve “digital expropriation” for AI companies

EU member states have approved a change to GDPR that would make personal data processing automatically lawful when it occurs 'in the context of AI,' according to reports. Critics, including privacy advocate Max Schrems, say the provision would let major AI companies use decades of collected personal data with few restrictions.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#ai#privacy Read original →
GDPR / Intl
Politico — Tech · · International

‘Just the beginning’: New Mexico AG warns AI industry after $25B Meta ruling

New Mexico Attorney General Raúl Torrez issued a public warning to the AI and tech industry following a $25 billion ruling against Meta, calling it a starting point rather than a conclusion. Torrez urged other state attorneys general to pursue similar litigation rather than settle.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#state-privacy#ai Read original →
GDPR / Intl
B Biometric Update · · International

Clearview AI spars with UK ICO over facial recognition as monitoring

Clearview AI is in a dispute with the UK's Information Commissioner's Office over how the company's facial recognition technology should be classified and regulated. The disagreement centers on whether Clearview's system constitutes monitoring under UK data protection law.

Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy

#gdpr#surveillance#ai#privacy Read original →
GDPR / Intl
EDPS · · EU

ARETE - Assessment of Risk to Individuals of Personal Data Breaches

The European Data Protection Supervisor held a half-day workshop called ARETE in June 2026, focused on how to assess the risk that personal data breaches pose to the individuals whose data is exposed.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →
GDPR / Intl
D Digital Watch Observatory · · International

UK ICO consultation on research data privacy closes

The UK Information Commissioner's Office has closed its public consultation on how privacy rules apply to the use of personal data in research contexts. The consultation period has now ended, meaning responses will be reviewed before any guidance or policy changes are issued.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

#gdpr#privacy Read original →