Search & browse the archive

TikTok is violating EU regulations on kids’ privacy rights, according to an investigation

An investigation has found that TikTok is breaching European Union regulations designed to protect children's privacy rights. The findings suggest the platform is not meeting its legal obligations under EU rules that impose stricter requirements on how companies handle data belonging to minors.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

WIRED — AI · Jul 24, 2026 · International

Silicon Valley Is Completely Divided Over Chinese AI

A split has emerged inside Silicon Valley over how to respond to Chinese AI development, with well-funded AI companies sounding warnings while smaller startups tend to push back against that framing. The divide reflects competing interests as much as competing assessments of the actual threat.

Who should care: General readers · AI governance · Policy

MI Congresswoman Backs Facial Recognition Wagering Bill

I need to work carefully here. The excerpt is nearly identical to the headline and gives me very little to go on beyond: a Michigan congresswoman is supporting a bill related to facial recognition in wagering (gambling) contexts. ```json { "summary": "A Michigan congresswoman has thrown her suppo

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Cheshire Constabulary to deploy Live Facial Recognition technology in Chester city centre as part of Operation Vigilant

Cheshire Constabulary has announced plans to deploy live facial recognition technology in Chester city centre under an initiative called Operation Vigilant. The deployment would scan faces in public spaces in real time, comparing them against a watchlist maintained by police.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Civil Society Read Out Report: First UN Global Dialogue on AI Governance

Civil society organizations have published a read-out report from the first UN Global Dialogue on AI Governance, documenting their perspectives and participation in the international forum convened to shape how artificial intelligence is governed at a global level.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Politico — Tech · Jul 24, 2026 · International

Big Tech companies defend open-weight AI models

More than 20 major technology companies, including Microsoft, Meta, Nvidia, and Palantir, signed a joint letter defending open-weight AI models, shared exclusively with POLITICO. The coalition, which also includes venture firm a16z and Dell, is pushing back against efforts to restrict this class of AI development.

Who should care: General readers · AI governance · Policy

Google is signing the EU AI Act Code of Practice on Transparency of AI-Generated Content.

Google has announced it will sign the EU AI Act's Code of Practice on Transparency of AI-Generated Content, a voluntary industry commitment tied to the bloc's broader AI regulatory framework. The move signals Google's formal alignment with European standards for disclosing when content has been generated by AI systems.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

BleepingComputer · Jul 24, 2026 · International

Chick-fil-A data breach affects more than 13,000 customers

Chick-fil-A confirmed that credential stuffing attacks on its website and mobile app over a three-day period in June compromised more than 13,000 customer accounts. The attacks used previously stolen login credentials to gain unauthorized access.

Who should care: Cybersecurity · Privacy officers · Administrators

BleepingComputer · Jul 24, 2026 · International

Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack

Slopsquatting, phantom squatting, and HalluSquatting all exploit the same late-binding attack pattern, where AI coding agents trust hallucinated package, repo, or domain names. ActiveState explains how pre-fetch verification and governed dependency management can help stop these attacks before malicious code enters the pipeline. [...]

Who should care: General readers · AI governance · Policy

Ars Technica — Policy · Jul 24, 2026 · International

AI firms want more data centers; Trump's EPA may give neighbors less say

The Trump administration's EPA is considering a rule that would let states determine how much public input, if any, is required before approving new data center construction. The proposal comes as AI companies push aggressively to expand infrastructure capacity across the country.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

The EU AI Act – when does it become enforceable now?

The EU AI Act is rolling out in phases, with different provisions becoming enforceable at different points across 2024 through 2027. The timeline determines when companies must actually comply, not just prepare, and when regulators can begin enforcement action.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers

Just Security · Jul 24, 2026 · US Federal

The Pentagon’s Autonomous Weapons Definitions Don’t Need an Overhaul, They Need an Update

The Pentagon is expanding AI integration into weapons systems, but a foundational problem persists: there is no shared, settled definition of what counts as an autonomous weapon. A new analysis argues the existing policy framework needs targeted updates, not a full replacement.

Who should care: General readers · AI governance · Policy

IAPP · Jul 24, 2026 · International

Notes from the IAPP Canada: Why privacy needs more success stories

At the IAPP Canada conference, speakers made the case that the privacy field has spent too long leading with warnings and risks, and needs to shift toward communicating concrete wins to build broader public and institutional support.

Who should care: General readers · Privacy officers · Policy

The Guardian — Tech · Jul 24, 2026 · International

Be skeptical of OpenAI’s rogue hacker agent story | John Thickstun

A researcher and critic argues that OpenAI's public warnings about dangerous AI capabilities may serve its business interests more than genuine safety goals, drawing a line from the 2019 GPT-2 release controversy to the company's current messaging around agentic AI.

Who should care: General readers · AI governance · Policy

Buenos Aires province lawmakers propose mandatory facial recognition, session limits for iGaming platforms

Legislators in Buenos Aires province have introduced a proposal that would require iGaming platforms to use facial recognition technology and impose mandatory session time limits on players. The measure appears aimed at player protection and identity verification within the province's online gambling market.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

DataBreaches.net · Jul 24, 2026 · International

Crime Stoppers assured people their tips would be anonymous. Then more than 1 million tips leaked.

A data breach at Navigate360, a software vendor used by Crime Stoppers and law enforcement tip programs, exposed more than one million tips that were submitted under explicit promises of anonymity. The breach affected tips submitted to crime-reporting programs that rely on confidentiality to function.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

CDT Europe's Feedback on the Draft Guidelines for the Classification of High-Risk AI Systems under the AI Act

CDT Europe has submitted formal feedback on draft guidelines that will determine how AI systems are classified as high-risk under the EU AI Act. The classification guidelines matter because they set the boundary between AI uses subject to strict legal requirements and those that largely escape them.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

EU finds TikTok violates its digital rule book by failing to protect privacy of minors

European Union regulators have determined that TikTok violated the bloc's digital rules by failing to adequately protect the privacy of minors on its platform. The finding represents a formal enforcement action under the EU's framework governing large online platforms.

Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy

DataBreaches.net · Jul 24, 2026 · International

Origin silent on settlement as alleged fired employee breach detail emerges

Origin Energy has not confirmed or denied reports that it quietly settled a cyber extortion demand, while details have emerged suggesting the alleged breach point was a terminated former employee's credentials. The company faces overlapping disclosure obligations to regulators, the Australian Securities Exchange, and insurers as the situation develops.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

DataBreaches.net · Jul 24, 2026 · International

T-Mobile violated WA data breach notification law, judge rules

A King County Superior Court judge ruled that T-Mobile violated Washington state's data breach notification law after a breach exposed sensitive personal information belonging to 40 million people, data that was subsequently sold on the dark web. Washington's attorney general brought the civil lawsuit against the company in January 2025.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

DataBreaches.net · Jul 24, 2026 · International

Clop gang targets Windchill, FlexPLM in data theft attacks

Sergiu Gatlan reports: The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances. As cybersecurity company... Source

Who should care: Cybersecurity · Privacy officers · Administrators

The Guardian — Tech · Jul 24, 2026 · International

Should you use AI for a task? Here’s a simple way to decide | Bruce Schneier

Security technologist Bruce Schneier draws on a framework from AI researcher Daniel Meissler to help people think through when using AI is genuinely useful versus when it shortcuts something worth doing yourself. The context is his own students using AI for writing assignments at Harvard and the University of Toronto.

Who should care: General readers · AI governance · Policy

Meta Launches New Facebook Verified Badge For Actual, Real Humans

Meta Launches New Facebook Verified Badge For Actual, Real Humans Engadget

What the OpenAI-hugging face breach reveals about AI governance failures

Security incidents at OpenAI and Hugging Face have drawn attention to systemic weaknesses in how AI companies manage access, data, and accountability. Analysts point to the breaches as evidence that governance structures at major AI platforms have not kept pace with the scale and sensitivity of what these systems handle.

Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy