PrivacySignal

Search & browse the archive

The full corpus — beyond today's front page.

Reset

431 results · page 17 of 18

News
FTC Consumer Protection · · US Federal

Shutterstock to Pay $35 Million to Settle FTC Allegations Over Illegal Subscription and Cancellation Practices

Shutterstock Inc. will pay $35 million to settle Federal Trade Commission allegations that the online digital photo and video platform illegally made tens of millions of dollars from a range of unfair and deceptive practices, including charging consumers for products without their informed consent and making it difficult to cancel subscriptions. “Subscription and negative option features can be beneficial for both companies and consumers, making renewal simpler and streamlining payment processes,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “But these bene…

Who should care: General readers · Privacy officers · Policy

AI Governance
IAPP · · International

Companies pair up to release Automated AI Governance Package

Two companies have jointly launched an automated AI governance package, targeting organizations seeking structured tools to manage compliance and oversight of artificial intelligence systems. The product appears aimed at streamlining governance workflows, though specific technical details and partner identities were not disclosed in the announcement.

Why this matters: Automated governance tools can embed accountability into AI pipelines, but they may also create a false sense of compliance while obscuring how personal data is actually processed — making independent human oversight and transparency to affected individuals equally critical.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
AI Governance
IAPP · · International

The AI governance conversation is happening in the wrong room

A piece published through the IAPP argues that current AI governance discussions are taking place in forums or among stakeholders that exclude key voices, suggesting the existing deliberative spaces are misaligned with the breadth of interests at stake.

Why this matters: When AI governance is shaped without input from civil society, affected communities, or digital rights advocates, resulting frameworks risk prioritizing industry or institutional interests over individual privacy protections and civil liberties safeguards.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
AI Governance
IAPP · · International

Amendments move Colorado AI Act's focus from risk to transparency

Proposed amendments to Colorado's AI Act would shift the law's regulatory emphasis away from risk-based obligations for developers and deployers toward transparency and disclosure requirements, representing a notable recalibration of how the state approaches AI governance.

Why this matters: A transparency-first framework could give individuals clearer visibility into when and how automated systems affect decisions about them — though it may place less enforceable burden on companies to prevent harm before it occurs.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

#ai-governance#ai Read original →
Healthcare
The Guardian — Privacy · · International

Palantir’s access to identifiable NHS England patient data is ‘dangerous’, MPs say

UK parliamentarians have raised alarms over NHS England granting Palantir and other contractors broad access to identifiable patient records — before pseudonymisation — as part of an AI platform development project. Internal NHS documents reportedly acknowledged the arrangement carries a risk of eroding public trust.

Why this matters: Providing a US defence-linked firm with pre-anonymised health records raises acute concerns about patient consent, data sovereignty, and the scope of permissible use — particularly given Palantir's history of government surveillance contracts. Individuals rarely anticipate their medical data reaching such actors.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai Read original →
News
FTC Consumer Protection · · US Federal

FTC Chairman Ferguson Advises Companies to Comply with the Take It Down Act

Federal Trade Commission Chairman Andrew N. Ferguson sent letters today to more than a dozen prominent technology companies reminding businesses of their obligation to comply fully with the Take It Down Act (TIDA) no later than May 19. Signed into law last year by President Donald J. Trump with the strong support of First Lady Melania Trump, TIDA requires covered platforms to establish a process allowing victims, including children, to request removal of intimate photos or videos shared without their consent.  The letters were sent to major platforms, including Amazon, Alphabet, Apple, A…

Who should care: General readers · Privacy officers · Policy

Breach
Information Commissioner's Office · · UK

Fine of nearly £1m issued against South Staffordshire Plc and South Staffordshire Water Plc following major cyber attack and data breach

The UK's Information Commissioner's Office has levied a fine of approximately £1 million against South Staffordshire Plc and its water utility subsidiary following a significant cyberattack that resulted in a personal data breach affecting customers.

Why this matters: When critical infrastructure operators fail to secure personal data, ordinary people bear the consequences of exposed information with little recourse. Regulatory penalties signal that custodians of sensitive data face accountability, reinforcing individuals' right to expect adequate protection.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →
News
EDPS · · EU

Safe and Ethical AI: a big European idea for the world

Safe and Ethical AI: a big European idea for the world miriam Thu, 05/07/2026 - 16:04 Fri, 05/08/2026 - 12:00 On 9 May, Europeans celebrate Europe Day. Europe has continued to shape big ideas that unite people around shared values & fundamental rights. Our commitment to human-centric, transparent technology remains more important than ever. 1 Read the blog post

Who should care: General readers · AI governance · Policy

News
The Guardian — Privacy · · International

AI facial recognition oversight lagging far behind technology, watchdogs warn

UK biometrics commissioners have cautioned that regulatory frameworks governing AI-powered facial recognition are failing to keep pace with rapid deployment, as London's Metropolitan Police nearly doubled the volume of faces scanned in the past year and retailers expand their own use of the technology.

Why this matters: Millions of people are being passively scanned in public and commercial spaces with limited legal safeguards — raising serious concerns about presumption of innocence, given documented false-positive rates, and the normalization of continuous biometric surveillance without meaningful consent or redress.

Who should care: Lawyers · Compliance · Privacy officers · Cybersecurity · General readers · AI governance · Policy

#regulation#surveillance#ai#privacy Read original →
News
The Guardian — Privacy · · International

How does live facial recognition work and how many UK police forces use it?

Live facial recognition has been used by UK police since 2020, primarily in London, and the current Labour government is now pushing for nationwide adoption, including 40 new camera-equipped vans for deployment across England and Wales town centres.

Why this matters: Mass deployment of always-on facial recognition in public spaces means ordinary people are effectively subject to biometric surveillance without consent, raising due-process concerns — particularly given documented risks of misidentification that fall disproportionately on minority communities.

Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy

#surveillance#ai#privacy Read original →
AI Governance
The Guardian — Privacy · · International

Dynamic pay on platforms such as Uber should be banned, says TUC

The UK's Trades Union Congress is calling for a ban on algorithm-driven dynamic pay on gig platforms like Uber, arguing the practice severs the link between effort and earnings, leaving workers with unpredictable income determined by opaque automated systems.

Why this matters: When consequential decisions about people's livelihoods are delegated to undisclosed algorithms, workers lose meaningful insight into — or recourse against — the logic controlling them, raising broader questions about algorithmic transparency and individuals' right to understand systems that govern their daily lives.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers

#ai-governance#ai#privacy Read original →
Breach
The Guardian — Privacy · · International

UK Biobank has my data, but I’m not worried. I know the benefits are too great to consider pulling out | Polly Toynbee

A dataset from UK Biobank — a large longitudinal health research repository — reportedly appeared for sale on Alibaba's platform in China, prompting concern among researchers and a warning from UK Science Minister Patrick Vallance that further such attempts are anticipated. Columnist Polly Toynbee argues the research value of such studies outweighs the risks.

Why this matters: The incident illustrates that even well-governed research databases carrying sensitive, long-term health records are vulnerable to unauthorized distribution, raising questions about whether participants' informed consent extends to scenarios where their data surfaces on foreign commercial platforms beyond any regulator's reach.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Breach
The Guardian — Privacy · · International

More private health records of UK Biobank volunteers appear on Chinese website

Additional confidential health records from UK Biobank's 500,000 volunteers have appeared for sale on Alibaba following last week's initial breach, with Science Minister Patrick Vallance confirming the government is coordinating with Chinese authorities to remove the listings and anticipating further exposures.

Why this matters: Volunteers donated sensitive biological and medical data under an expectation of research use, not commercial exposure; the ongoing resurfacing of that data on a foreign marketplace highlights how breaches of biomedical repositories can strip individuals of control over their most intimate personal information with limited immediate recourse.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

#breach#healthcare Read original →
Enforcement
The Guardian — Privacy · · International

UK information commissioner steps back amid workplace investigation

UK Information Commissioner John Edwards has temporarily stepped aside while the ICO conducts an independent internal investigation into undisclosed workplace conduct. Edwards, who heads the country's primary data protection and information rights authority, announced his cooperation via LinkedIn.

Why this matters: The voluntary recusal of the UK's chief privacy regulator creates a leadership vacuum at the body responsible for enforcing data protection rights — raising questions about continuity of oversight at a moment when both AI governance and public-sector surveillance are under active scrutiny.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Breach
The Guardian — Privacy · · International

Some Interrail travellers told to cancel passports as hacked data posted online

Eurail, which sells passes, says data being ‘offered for sale on dark web’ after December breach affecting 300,000 people Holidaymakers across Europe are facing the stress and expense of getting new passports after their personal data was posted on the dark web after a hack of the Interrail company Eurail. Personal data, including passport numbers, names, phone numbers, email and home addresses and dates of birth of more than 300,000 European travellers was accessed in December. But this week Eurail revealed to customers that “data copied during the security incident has been offered for sale…

Who should care: Cybersecurity · Privacy officers · Administrators

Healthcare
The Guardian — Privacy · · International

What is the UK Biobank project and what are the privacy concerns around it?

Volunteers’ data has enabled medical breakthroughs, but there are questions over how that data is protected With the revelation that the confidential health records of half a million British volunteers have been put up for sale on a Chinese website, we take a look at what the UK Biobank project has achieved – and why concerns have been raised. Continue reading...

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Enforcement
The Guardian — Privacy · · International

Met police in talks to buy Palantir AI tech for use in criminal investigations

London's Metropolitan Police has been in discussions with Palantir about acquiring the company's AI tools to automate intelligence analysis in criminal investigations. The US firm, whose platforms support ICE's immigration enforcement operations and the Israeli military, recently demonstrated its systems to senior Met intelligence officers.

Why this matters: Handing a foreign private contractor access to highly sensitive policing data raises serious questions about oversight, data sovereignty, and mission creep — particularly given Palantir's track record powering mass surveillance and enforcement programs with documented civil liberties concerns.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
← Prev Page 17 of 18 Next →