Enforcement
News release: Joint investigation by Canadian privacy regulators into OpenAI’s ChatGPT leads to better protections for Canadians’ personal information
News release
Who should care: Lawyers · Privacy officers · Compliance
Search & browse the archive
The full corpus — beyond today's front page.
442 results · page 18 of 19
Enforcement
Statement by the Privacy Commissioner of Canada regarding a joint investigation of OpenAI’s ChatGPT
Statement by the Privacy Commissioner of Canada regarding a joint investigation of OpenAI’s ChatGPT
Who should care: Lawyers · Privacy officers · Compliance
#enforcement
Read original →
News
AI facial recognition oversight lagging far behind technology, watchdogs warn
UK biometrics commissioners have cautioned that regulatory frameworks governing AI-powered facial recognition are failing to keep pace with rapid deployment, as London's Metropolitan Police nearly doubled the volume of faces scanned in the past year and retailers expand their own use of the technology.
Why this matters: Millions of people are being passively scanned in public and commercial spaces with limited legal safeguards — raising serious concerns about presumption of innocence, given documented false-positive rates, and the normalization of continuous biometric surveillance without meaningful consent or redress.
Who should care: Lawyers · Compliance · Privacy officers · Cybersecurity · General readers · AI governance · Policy
News
How does live facial recognition work and how many UK police forces use it?
Live facial recognition has been used by UK police since 2020, primarily in London, and the current Labour government is now pushing for nationwide adoption, including 40 new camera-equipped vans for deployment across England and Wales town centres.
Why this matters: Mass deployment of always-on facial recognition in public spaces means ordinary people are effectively subject to biometric surveillance without consent, raising due-process concerns — particularly given documented risks of misidentification that fall disproportionately on minority communities.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
AI Governance
Dynamic pay on platforms such as Uber should be banned, says TUC
The UK's Trades Union Congress is calling for a ban on algorithm-driven dynamic pay on gig platforms like Uber, arguing the practice severs the link between effort and earnings, leaving workers with unpredictable income determined by opaque automated systems.
Why this matters: When consequential decisions about people's livelihoods are delegated to undisclosed algorithms, workers lose meaningful insight into — or recourse against — the logic controlling them, raising broader questions about algorithmic transparency and individuals' right to understand systems that govern their daily lives.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
Breach
UK Biobank has my data, but I’m not worried. I know the benefits are too great to consider pulling out | Polly Toynbee
A dataset from UK Biobank — a large longitudinal health research repository — reportedly appeared for sale on Alibaba's platform in China, prompting concern among researchers and a warning from UK Science Minister Patrick Vallance that further such attempts are anticipated. Columnist Polly Toynbee argues the research value of such studies outweighs the risks.
Why this matters: The incident illustrates that even well-governed research databases carrying sensitive, long-term health records are vulnerable to unauthorized distribution, raising questions about whether participants' informed consent extends to scenarios where their data surfaces on foreign commercial platforms beyond any regulator's reach.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Breach
More private health records of UK Biobank volunteers appear on Chinese website
Additional confidential health records from UK Biobank's 500,000 volunteers have appeared for sale on Alibaba following last week's initial breach, with Science Minister Patrick Vallance confirming the government is coordinating with Chinese authorities to remove the listings and anticipating further exposures.
Why this matters: Volunteers donated sensitive biological and medical data under an expectation of research use, not commercial exposure; the ongoing resurfacing of that data on a foreign marketplace highlights how breaches of biomedical repositories can strip individuals of control over their most intimate personal information with limited immediate recourse.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Enforcement
UK information commissioner steps back amid workplace investigation
UK Information Commissioner John Edwards has temporarily stepped aside while the ICO conducts an independent internal investigation into undisclosed workplace conduct. Edwards, who heads the country's primary data protection and information rights authority, announced his cooperation via LinkedIn.
Why this matters: The voluntary recusal of the UK's chief privacy regulator creates a leadership vacuum at the body responsible for enforcing data protection rights — raising questions about continuity of oversight at a moment when both AI governance and public-sector surveillance are under active scrutiny.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
Breach
Some Interrail travellers told to cancel passports as hacked data posted online
Eurail, which sells passes, says data being ‘offered for sale on dark web’ after December breach affecting 300,000 people Holidaymakers across Europe are facing the stress and expense of getting new passports after their personal data was posted on the dark web after a hack of the Interrail company Eurail. Personal data, including passport numbers, names, phone numbers, email and home addresses and dates of birth of more than 300,000 European travellers was accessed in December. But this week Eurail revealed to customers that “data copied during the security incident has been offered for sale…
Who should care: Cybersecurity · Privacy officers · Administrators
#breach
Read original →
Healthcare
What is the UK Biobank project and what are the privacy concerns around it?
Volunteers’ data has enabled medical breakthroughs, but there are questions over how that data is protected With the revelation that the confidential health records of half a million British volunteers have been put up for sale on a Chinese website, we take a look at what the UK Biobank project has achieved – and why concerns have been raised. Continue reading...
Who should care: Healthcare professionals · Privacy officers · Compliance
#healthcare
Read original →
Enforcement
Met police in talks to buy Palantir AI tech for use in criminal investigations
London's Metropolitan Police has been in discussions with Palantir about acquiring the company's AI tools to automate intelligence analysis in criminal investigations. The US firm, whose platforms support ICE's immigration enforcement operations and the Israeli military, recently demonstrated its systems to senior Met intelligence officers.
Why this matters: Handing a foreign private contractor access to highly sensitive policing data raises serious questions about oversight, data sovereignty, and mission creep — particularly given Palantir's track record powering mass surveillance and enforcement programs with documented civil liberties concerns.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
News
News release: Deputy Commissioner appears before Senate Standing Committee on Social Affairs, Science and Technology on Bill S-5
News release
News
Palantir manifesto described as ‘ramblings of a supervillain’ amid UK contract fears
Alarm caused by posts of Alex Karp, tech firm’s CEO, championing US military dominance and of AI weapons The US spy tech company Palantir published a manifesto extolling the benefits of American power and implying some cultures are inferior to others – in what MPs have called “a parody of a RoboCop film” and “the ramblings of a supervillain”. “Some cultures have produced vital advances; others remain dysfunctional and regressive,” wrote Palantir in a 22-point post on X over the weekend, which also called for an end to the “postwar neutering” of Germany and Japan. Continue reading...
Who should care: General readers · AI governance · Policy
#ai
Read original →
Enforcement
Fines
Ireland's Data Protection Commission has issued fines, though the specific details of the enforcement action, including the parties involved and the amounts levied, are not specified in the available information.
Why this matters: Regulatory fines signal that data protection authorities are actively enforcing privacy rules, which can deter organizations from mishandling personal data and reinforce individuals' rights under frameworks like GDPR.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
AI Governance
Building trust: Privacy and AI governance - Remarks by the Privacy Commissioner of Canada to the Victoria International Privacy and Security Summit
Building trust: Privacy and AI governance - Remarks by the Privacy Commissioner of Canada to the Victoria International Privacy and Security Summit
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
AI Governance
Designing transparency for government AI: Insights from the UK’s Algorithmic Transparency Recording Standard initiative
The UK's Algorithmic Transparency Recording Standard (ATRS) requires government bodies to publicly document how algorithmic tools are used in public-sector decision-making, aiming to improve accountability and build public trust in state AI deployments.
Why this matters: Mandatory disclosure of how government algorithms operate gives individuals meaningful insight into automated decisions that may affect their benefits, policing, or services — a baseline safeguard against opaque state power that civil liberties advocates have long sought.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
News
WhatsApp notifies hundreds of users who installed a fake app made by government spyware maker
The Meta-owned company said it identified around 200 users who were tricked into installing a fake version of WhatsApp that was actually Italian-made spyware.
Who should care: Privacy officers · Cybersecurity
#surveillance
Read original →
News
MP rejects Palantir’s claims that criticism of NHS England deal is ‘ideologically motivated’
Head of committee says it was appropriate for government to seek guidance on way out of £330m deal with US data company Claims by Palantir that concerns over the US data analytics company’s multimillion-pound NHS contract are “ideologically motivated” have been rejected by the chair of a parliamentary committee. It was also appropriate for the government to seek guidance on activating a break contract in the deal, said Chi Onwurah, a Labour MP who heads the science, innovation and technology select committee. Continue reading...
Who should care: Lawyers · Compliance
#regulation
Read original →
GDPR / Intl
Rethinking AI data: From scraping to sustainable and ethical data sharing
The OECD's VIADUCT initiative examines growing tensions in AI training data acquisition, questioning the sustainability of web scraping and exploring alternatives centered on ethical data-sharing frameworks that account for copyright, GDPR compliance, and equitable access.
Why this matters: A shift away from indiscriminate scraping toward consent-based data-sharing models could strengthen individuals' control over how their personal content and information fuels AI systems — a meaningful development for data rights under frameworks like GDPR.
Who should care: Lawyers · Privacy officers · AI governance · Administrators · General readers · Policy
News
Regulators launch joint taskforce to crack down on poor practice in motor finance claims
Regulators launch joint taskforce to crack down on poor practice in motor finance claims Information Commissioner's Office
Who should care: Lawyers · Compliance
#regulation
Read original →
News
Apple will hide your email address from apps and websites, but not cops
Demands for Apple customer records by federal agents in recent months underscore the privacy limitations of email.
News
Google warns quantum computers could hack encrypted systems by 2029
Banks, governments and tech providers urged to upgrade security because current systems will soon be obsolete Banks, governments and technology providers need to be prepared for quantum computer hackers capable of breaking most existing encryption systems by 2029, Google has warned. The tech company said in a blogpost that quantum computers would pose a “significant threat to current cryptographic standards” before the end of the decade and urged other companies to follow its lead. Continue reading...
AI Governance
To be truly participative, stakeholder involvement should follow an AI system’s entire lifecycle
An OECD analysis argues that meaningful participation in AI governance requires more than one-time consultation, calling instead for community authority and structured oversight spanning an AI system's full lifecycle — from design through deployment and decommissioning.
Why this matters: Without sustained stakeholder involvement, affected communities — including those most vulnerable to algorithmic harm or surveillance — have little recourse once systems are live, leaving rights protections dependent on developer goodwill rather than accountable governance structures.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
News
MPs urge UK government to halt contract giving Palantir FCA data access
Awarding US spy-tech company deal involving sensitive financial data is ‘huge error of judgment’, Liberal Democrats say MPs have urged the government to halt its latest contract with Palantir after the Guardian revealed that the US spy-tech company is to gain access to a trove of highly sensitive UK financial regulation data. The Financial Conduct Authority, the watchdog for thousands of financial bodies from banks to hedge funds, has hired Palantir to apply its AI systems to two years’ worth of internal intelligence data to help it tackle financial crime. Continue reading...
Who should care: Lawyers · Compliance · General readers · AI governance · Policy