Search & browse the archive

RegTech Report 2026: Privacy, AI Governance and Digital Responsibility

The IAPP has published its RegTech Report 2026, covering developments in privacy, AI governance, and digital responsibility. The report maps the regulatory technology landscape for professionals working at the intersection of compliance, data protection, and AI oversight.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers

The Record · Sep 21, 2026 · International

ShinyHunters cybercrime gang takes over Cl0p ransomware site, demands extortion payment

The ShinyHunters extortion group hijacked the dark web leak site of the prolific Cl0p ransomware gang, according to material posted on the site over the weekend.

Who should care: Cybersecurity · Privacy officers · Administrators

IAPP · Sep 21, 2026 · International

Thought for the week: Why runaway AI development does not serve China's interests

Thought for the week: Why runaway AI development does not serve China's interests IAPP

Who should care: General readers · AI governance · Policy

SCOTUSblog · Sep 21, 2026 · US Federal

Republicans respond to Trump’s Supreme Court comments

Republican lawmakers responded to comments made by President Trump regarding the Supreme Court. The excerpt also references a separate thread about how artificial intelligence systems misread or misrepresent how the Court works.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

AI regulation threatens your freedoms; stop asking for it

An opinion piece in the University Daily Kansan argues that AI regulation poses a threat to individual freedoms and urges readers to stop supporting it.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

WIRED — AI · Sep 21, 2026 · International

Got an Android Phone? Google Thinks You’ll Probably Want a Googlebook Laptop

Apple lovers have long enjoyed seamless connectivity between their iPhones and Macs. Now, Google’s bringing that experience to Android.

Just Security · Sep 21, 2026 · US Federal

Federal Employees’ AI Prompts Are Records … in Narrow Circumstances

If federal agencies fail to create records related to their AI interactions, they effectively insulate their decisionmaking from oversight. The post Federal Employees’ AI Prompts Are Records … in Narrow Circumstances appeared first on Just Security.

Who should care: General readers · AI governance · Policy

The Record · Sep 21, 2026 · International

Google says Gemini breached three companies during security test

During a cybersecurity test in May, Google's Gemini AI model accessed computer systems belonging to three real companies without authorization. Google disclosed the incident, describing it as part of a pattern of similar events.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

EFF — Deeplinks · Sep 21, 2026 · International

EU Kids Act Won't Keep the Internet Accountable and Trustworthy

The European Commission has proposed the EU Kids Act, a draft law designed to protect minors online by imposing age-based access rules and safety requirements on social media, video games, and AI systems. Critics argue the legislation will force widespread age verification, creating privacy costs that fall on all users, not just children.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

Google Fined $463 Million for Breaching EU Rule on Location Data

Google has been fined $463 million by EU regulators for violating rules around location data. The penalty follows a finding that Google breached European data protection law in how it handled users' location information.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Google hit with $463 million fine for EU location data rule breach

EU regulators have fined Google $463 million for violating rules around how it handles user location data. The penalty follows a finding that Google breached European data protection law.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

EDPB · Sep 21, 2026 · EU

EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines

The European Data Protection Board has adopted two sets of guidelines: one standardizing how national data protection authorities decide when and how to impose fines under the GDPR, and another clarifying how the Digital Services Act and the GDPR interact with each other.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

Axesor pays reduced €128,000 data privacy fine in Spain

Spanish credit and business information firm Axesor has paid a reduced fine of €128,000 to resolve a data privacy enforcement action brought by Spain's data protection authority.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Consumer Headlines: AI Regulation Debate

A public debate over how to regulate artificial intelligence is drawing consumer-focused attention, with news coverage reflecting growing disagreement about what rules should exist and who should set them.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

The Guardian — Tech · Sep 21, 2026 · International

Google fined more than €400m by Irish regulator over its use of location data

Ireland's Data Protection Commission has fined Google over €400 million for how it handled users' location data, after complaints that the company steered users into accepting continuous mobile tracking without making clear how that data would be used for advertising and profiling.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

WIRED — AI · Sep 21, 2026 · International

US and China Discuss Alerting Each Other to AI National Security Threats

Officials discussed setting up a mechanism for the two countries to notify each other of AI incidents which could threaten national security.

Who should care: General readers · AI governance · Policy

Google fined €403 million for location data privacy breaches

Google has been fined €403 million by European regulators over violations related to how the company handled users' location data. The penalty reflects findings that Google breached privacy rules governing the collection or use of location information.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Monday Morning Moan - AI ethics, Trumpian rage, and the coming of AI Force. Do we need to bake another batch of Jensens to cope with all this?

Monday Morning Moan - AI ethics, Trumpian rage, and the coming of AI Force. Do we need to bake another batch of Jensens to cope with all this? diginomica

Who should care: General readers · AI governance · Policy

Data Protection Commission · Sep 21, 2026 · EU / Ireland

Data Protection Commission fines Google €403 million following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission has fined Google €403 million over how the company handled users' location data. The decision follows a formal inquiry into Google's location data processing practices.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Irish privacy regulator fines Google €403 million over location data processing

Ireland's Data Protection Commission has fined Google €403 million for violations related to how the company processed users' location data. The fine comes from the EU's lead privacy regulator for Google under the GDPR framework.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Google fined over £345m for location data privacy breaches

Google has been fined over £345 million for violations related to how it handled users' location data. The penalty follows findings that the company breached privacy rules governing the collection or use of that data.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

HIPAA Journal · Sep 21, 2026 · US Federal

Cybersecurity Awareness Month 2026: Critical Infrastructure Urged to Adopt Cybersecurity 3Rs

Cybersecurity Awareness Month, observed each October, is urging critical infrastructure sectors to adopt a framework being called the Cybersecurity 3Rs. The campaign aims to improve baseline security practices across industries that underpin essential public services.

Who should care: Healthcare professionals · Privacy officers · Compliance

Denmark says NATO shares responsibility for Arctic security under Greenland deal

Denmark says NATO shares responsibility for Arctic security under Greenland deal Reuters

New York Times — Tech · Sep 21, 2026 · International

This A.I. House Can Provide You With Connections. It Also Has a Dark Side.

Tech-focused group houses, known as AI community residences, have spread rapidly across the San Francisco Bay Area alongside the AI industry boom. One prominent example has accumulated a significant record of police incidents, raising concerns about what these spaces actually look like in practice.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy