Search & browse the archive

iapp.org · Sep 23, 2026 · International

EU AI Act literacy changes may complicate, more than simplify, compliance

Recent changes to the EU AI Act's literacy requirements may create additional compliance burdens rather than making it easier for organizations to meet the law's obligations. The adjustment, intended to clarify what companies must do to ensure AI competency, appears to be generating new uncertainty instead.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

DataBreaches.net · Sep 23, 2026 · International

Ryuk Ransomware Operator Sentenced to 24 Months in Prison

Abinaya reports: An Armenian national extradited from Ukraine to the United States has been sentenced to federal prison for his role in Ryuk ransomware attacks that targeted organizations worldwide, including a company in Oregon. Karen Vardanyan, 35, received a 24-month federal prison sentence followed by 3 years of supervised release, according to the U.S. Attorney’s... Source

Who should care: Cybersecurity · Privacy officers · Administrators

iapp.org · Sep 23, 2026 · International

The FRIA is coming: Assess AI connectors, not just AI systems

The FRIA is coming: Assess AI connectors, not just AI systems iapp.org

Who should care: General readers · AI governance · Policy

Four US Republicans call for Trump to release Taiwan security funds

Four US Republicans call for Trump to release Taiwan security funds Reuters

Scan your face to enter your dorm? University of Kentucky installs facial recognition tech around campus

The University of Kentucky has installed facial recognition technology around its campus, including at dormitory entrances, requiring students to scan their faces for access. The deployment marks a significant expansion of biometric surveillance in a residential campus setting.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

The Record · Sep 23, 2026 · International

Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million

An Armenian national and member of the Ryuk ransomware gang was sentenced to two years in federal prison for his role in launching attacks.

Who should care: Cybersecurity · Privacy officers · Administrators

In the AI governance race, EY’s Dilek Çilingir explains how compliance can keep AI in step

EY compliance leader Dilek Çilingir spoke with Compliance Week about how organizations can use compliance frameworks to keep AI systems aligned with governance expectations as regulatory pressure increases.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

HIPAA Journal · Sep 23, 2026 · US Federal

77% of Ransomware Groups Are Targeting the Healthcare Sector

A new analysis of ransomware activity finds that roughly three-quarters of active ransomware groups are targeting the healthcare sector in the United States. The findings point to sustained, broad pressure on healthcare organizations rather than isolated incidents.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

The Record · Sep 23, 2026 · International

FBI investigating alleged ShinyHunters breach of its jobs site

The ShinyHunters cybercriminal organization on Tuesday replaced agency images on the FBIjobs.gov site with a photo of a Pokemon that has become the group’s defacto mascot.

Who should care: Cybersecurity · Privacy officers · Administrators

CVS settles data privacy lawsuit for $20.5M: See if you qualify for a payout

CVS has agreed to a $20.5 million settlement to resolve a data privacy lawsuit. Affected individuals may be eligible to file a claim for a share of the settlement fund.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Politico — Tech · Sep 23, 2026 · International

Dems urge Trump to seek AI deal with China

In a letter shared with POLITICO, 17 Democratic senators called on the president to discuss slowing or pausing AI development with Xi Jinping at their upcoming summit.

Who should care: General readers · AI governance · Policy

Fintech: AI regulation must be grounded in human rights

The International Bar Association's fintech group has put forward the position that regulation of artificial intelligence should be anchored in human rights frameworks rather than narrower technical or commercial standards.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

WIRED — AI · Sep 23, 2026 · International

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.

Who should care: General readers · AI governance · Policy

Just Security · Sep 23, 2026 · US Federal

With Muse, Meta Could Have the Power to Decide What Matters in Your Life

Meta has introduced Muse, a 24/7 AI assistant designed to operate continuously in users' lives. Analysts and critics are examining what that persistent presence means for personal autonomy and how Meta handles the data such a system would collect.

Who should care: General readers · AI governance · Policy · Privacy officers

The Record · Sep 23, 2026 · International

Latvia arrests suspected hacker for electronics repair company breach

Latvian authorities arrested a 23-year-old man suspected of breaching at least two companies, stealing personal data, and attempting to extort money from the affected organizations.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

CyberScoop · Sep 23, 2026 · US Federal

The president has called for AI leadership. Here’s the mission.

An AI compact built around capability, control, and continuity can ensure the country stays safe and secure while also leading the world in the technology. The post The president has called for AI leadership. Here’s the mission. appeared first on CyberScoop.

Who should care: General readers · AI governance · Policy

Innocence Project joins case against Reno over face recognition arrest

Innocence Project joins case against Reno over face recognition arrest Reno Gazette Journal

EDPB · Sep 23, 2026 · EU

The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

AI leaders to brief UN amid warnings the technology could slip beyond human control

AI leaders to brief UN amid warnings the technology could slip beyond human control Reuters

Who should care: General readers · AI governance · Policy

Maryland moves forward with AI regulation plan focused on worker and child protections

Maryland is advancing a plan to regulate artificial intelligence with a focus on protecting workers and children. The state joins a growing number of jurisdictions moving to set guardrails on how AI can be used in employment and contexts involving minors.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Trump to meet with China's Xi Jinping as calls for AI regulation get louder

President Trump is set to meet with Chinese President Xi Jinping amid growing pressure from various quarters for stronger oversight of artificial intelligence. The diplomatic meeting coincides with an intensifying global debate over how AI should be governed.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Meta expected to unveil smart glasses without camera as privacy concerns grow

Meta expected to unveil smart glasses without camera as privacy concerns grow Reuters

Who should care: General readers · Privacy officers · Policy

WIRED — AI · Sep 23, 2026 · International

AT&T Is Automating Away Jobs—and Its Old Telecom Empire

The telecom giant is eager to show Wall Street that it can do more with less. That means fewer employees, less electricity, and increased automation.

Who should care: General readers · AI governance · Policy

HIPAA Journal · Sep 23, 2026 · US Federal

Vasindas’ Around the Clock Care Settles Data Breach Litigation

Vasindas' Around the Clock Care, a California home care company, has reached a settlement in class action litigation stemming from a data breach. The case was reported by The HIPAA Journal, indicating the breach involved health-related information.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance