Search & browse the archive

IAPP · Aug 03, 2026 · International

EDPB requests review of EU-US Data Privacy Framework following Trump v. Slaughter

The European Data Protection Board has called for a review of the EU-US Data Privacy Framework following the Trump v. Slaughter case, which relates to the dismissal of Federal Trade Commission members and raises concerns about the independence of the US enforcement body underpinning the transatlantic data transfer agreement.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

As EU AI Act enters into force, study warns chatbots blur voters’ own political views

A study released as the EU AI Act takes effect warns that conversational AI systems may subtly distort users' own political views rather than simply informing them. The findings raise concerns about the role chatbots could play in shaping political opinion at scale.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

The Guardian — Privacy · Aug 03, 2026 · International

The best way to protect NHS patients’ data | Letter

A senior NHS clinician and policy expert argues that consolidation in the market for GP patient record systems — illustrated by the TPG/Optum UK deal — represents a structural problem, not just a one-off risk. The letter calls for genuine market competition as the safest way to prevent any single company from holding systemic leverage over sensitive patient data.

Who should care: Healthcare professionals · Privacy officers · Compliance

IAPP · Aug 03, 2026 · International

Thought for the week: A shifting AI policy landscape

I don't have enough to work with here. The headline and excerpt give me only a vague topic ("shifting AI policy landscape") and a source (IAPP), with no actual facts, events, or developments to brief on. To write an accurate, original briefing — not a generic observation dressed up as news — I need

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Congressional Research Service examines GLBA framework and recent financial data privacy bills

The Congressional Research Service has published an analysis of the Gramm-Leach-Bliley Act framework and recent legislative proposals aimed at updating financial data privacy rules in the United States.

Who should care: General readers · Privacy officers · Policy

HIPAA Journal · Aug 03, 2026 · US Federal

Is Your Organization Ready for a HIPAA Security Incident?

The HIPAA Journal is prompting healthcare organizations to evaluate their readiness for security incidents by conducting formal risk assessments that identify threats to protected health information and gauge the likelihood those threats materialize.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

HIPAA Journal · Aug 03, 2026 · US Federal

HIPAA Security Risk Assessment Checklist

The HIPAA Journal has published a checklist guide covering how organizations should conduct security risk assessments under HIPAA, including identifying threats to protected health information and evaluating how likely those threats are to occur.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

HIPAA Journal · Aug 03, 2026 · US Federal

Free HIPAA Security Risk Assessment

The HIPAA Journal is offering a free security risk assessment resource aimed at helping covered entities and business associates evaluate threats to protected health information. The tool is designed to walk organizations through identifying risks, estimating likelihood, and addressing gaps in their HIPAA security posture.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

BleepingComputer · Aug 03, 2026 · International

ExfilSquad hackers leak info of over 100,000 UK police officers, staff

A hacking group called ExfilSquad breached the UK's Police National Legal Database, exposing contact information belonging to more than 100,000 police officers and criminal justice staff. The attack targeted a database used across UK law enforcement.

Who should care: Cybersecurity · Privacy officers · Administrators

New Jersey’s New Data Broker Law Imposes Compliance Obligations on Entities That Provide Personal Data to Data Brokers, Prohibits the Sale of Sensitive Data

New Jersey has enacted a data broker law that places compliance obligations not only on data brokers themselves but also on companies that supply personal data to them. The law separately bans the sale of certain sensitive personal data categories.

Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy

Wegmans tests a revamped version of its classic small shopping carts

Wegmans tests a revamped version of its classic small shopping carts Grocery Dive

EU AI Act Enters Enforcement: What CCaaS Leaders Need To Know

The EU AI Act has moved from legislation into active enforcement, creating new compliance obligations for businesses that operate contact center as a service platforms in or serving European markets.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

HIPAA Journal · Aug 03, 2026 · US Federal

FTC; Utah; California Sue Him & Hers Over Business and Data Sharing Practices

The Federal Trade Commission, along with Utah and California, has filed suit against telehealth company Hims & Hers, alleging unlawful business and data sharing practices. The action marks a coordinated federal-state enforcement effort targeting the San Francisco-based company.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

HIPAA Journal · Aug 03, 2026 · US Federal

AmGen Announces Cyberattack and Data Breach Involving Patient Data

Amgen, a major biopharmaceutical company specializing in cancer, blood, and cardiovascular treatments, has disclosed a cyberattack that resulted in a breach of patient data. The company has not yet publicly detailed the scope of the breach or the specific types of information compromised.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

HIPAA Journal · Aug 03, 2026 · US Federal

CISA Issues Updated Guidance on Minimum Elements of an SBOM

CISA, the FBI, the NSA, and 15 international partners have released updated guidance defining the minimum required elements of a Software Bill of Materials (SBOM), a structured record of the components that make up a software product. The joint guidance builds on earlier frameworks and reflects growing international coordination around software supply chain transparency.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

The Guardian — Tech · Aug 03, 2026 · International

Ring Cycle review – AI staging dispenses with drama to create banal bric-a-brac

Bayreuth Festival's 150th anniversary production of Wagner's Ring cycle used AI to generate its visuals, drawing a critical response. A Guardian reviewer found the result shallow and incoherent, calling it a missed opportunity given the work's themes of power and knowledge.

Who should care: General readers · AI governance · Policy

EU AI Act Transparency Rules Are Now In Effect. Was It A Missed Opportunity?

The EU AI Act's transparency provisions have officially taken effect, marking the first binding obligations under the landmark regulation to apply in practice. Some observers argue the rules fall short of what meaningful AI disclosure should require.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Nextgov/FCW · Aug 03, 2026 · US Federal

Lawmakers propose giving 2015 OPM breach victims identity protection for life

Legislators are proposing permanent identity protection services for the roughly 22 million people whose personal data was stolen in the 2015 Office of Personnel Management breaches, linked to Chinese state-backed hackers. Current federal coverage for those victims is set to expire on September 30.

Who should care: Cybersecurity · Privacy officers · Administrators

Austin leaders to get report on residents' priorities for AI governance

Austin officials are set to receive a report outlining what residents want from local AI governance, reflecting a city-led effort to gather public input before shaping policy on how artificial intelligence is used in municipal operations.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Just Security · Aug 03, 2026 · US Federal

Regulate, Don’t Ban, Chinese AI Models

A policy argument published in Just Security contends that Chinese AI models should face the same pre-deployment and ongoing safety testing required of domestic models, rather than being subject to outright bans. The piece frames this as a matter of regulatory consistency rather than national-security exception.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

The Record · Aug 03, 2026 · International

Biotech giant Amgen says patient data stolen from third-party cloud systems

Amgen has disclosed to regulators that patient information and proprietary company data were accessed through a breach affecting third-party cloud systems the company relied on. The incident adds to a growing pattern of healthcare and biotech firms suffering data losses through vendors rather than their own internal infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · Lawyers

DataBreaches.net · Aug 03, 2026 · International

KR: Seoul lawmaker criticizes 5,000-won compensation for 4.62 million-person data breach

Seoul Facilities Corporation is facing political backlash over its proposed response to a data breach affecting approximately 4.62 million people. The company plans to offer each affected person roughly 5,000 won — about $3.50 USD — as compensation, a figure a Seoul city council member has publicly criticized as inadequate.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

AI Act enforcement begins as EU introduces new transparency rules for artificial intelligence

The European Union has begun enforcing the AI Act, introducing transparency requirements that apply to artificial intelligence systems operating in the bloc. The rules mark a shift from policy to active compliance obligations for companies deploying AI in Europe.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

TechCrunch — Privacy · Aug 03, 2026 · International

Samsung bans smart TV apps that share users’ internet connections with strangers

New security research offers a rare view inside residential proxy networks, which rely on apps that share a person's internet connection with someone else.