Search & browse the archive

Open Joint Letter on the AI Act Regulating AI-embedded Medical Devices

A coalition of organizations, including the Center for Democracy and Technology, has published an open joint letter addressing how the EU AI Act should apply to medical devices that incorporate AI. The letter calls for clarity on regulatory obligations where AI and medical device rules intersect.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

BleepingComputer · Jul 16, 2026 · International

AI Agents Broke the Security Playbook. Here's What Replaces It.

Traditional security workflows were built for environments that changed at human speed. Token Security explains why AI agents require a new approach: building on a live identity foundation while giving security teams the flexibility to create workflows tailored to their own environments. [...]

Who should care: General readers · AI governance · Policy

Louisiana Becomes 22nd State to Enact a Comprehensive Consumer Data Privacy Law

Louisiana has passed a comprehensive consumer data privacy law, making it the 22nd U.S. state to enact such legislation. The law adds Louisiana to a growing list of states that have moved to regulate how businesses collect, use, and share personal data.

Who should care: General readers · Privacy officers · Policy

BleepingComputer · Jul 16, 2026 · International

23andMe to pay $18 million in new genetics data breach settlement

23andMe has agreed to an $18 million settlement with a coalition of 43 state attorneys general over its failure to adequately protect customers' genetic data from a breach. The settlement resolves multistate claims that the company did not take sufficient steps to secure some of the most sensitive personal information people can share.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

Iraqi oil loadings briefly suspended after drone hits tanker at Basra, sources say

Iraqi oil loadings briefly suspended after drone hits tanker at Basra, sources say Reuters

IAPP · Jul 16, 2026 · International

EU debuts new digital sovereignty assessment tools

EU debuts new digital sovereignty assessment tools IAPP

The Guardian — Tech · Jul 16, 2026 · International

TikTok facing UK investigation amid fears over age checks and harm to children

UK media regulator Ofcom has opened a formal investigation into TikTok over concerns that its age verification measures are ineffective, potentially leaving children exposed to content about suicide, self-harm, and pornography. The probe comes roughly a year after child protection requirements under the Online Safety Act took effect.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

Facial Recognition Bill to Protect Children on Betting Platforms

A proposed bill would require betting platforms to use facial recognition technology to verify users' ages and prevent minors from accessing gambling services. The legislation frames biometric scanning as a child protection measure in the online gambling space.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Google required to open up to AI, search engine rivals under EU-mandated changes

European Union regulators are requiring Google to give competing search engines and AI services access to parts of its platform, marking a significant enforcement step under EU digital competition rules. The changes are designed to reduce Google's structural advantages in both traditional search and emerging AI-powered products.

Who should care: General readers · AI governance · Policy

DataBreaches.net · Jul 16, 2026 · International

AU: Regulator’s preliminary findings did not indicate Qantas breached privacy obligations

Australia's privacy regulator conducted a preliminary inquiry into a 2025 Qantas data breach that exposed 5.67 million customer records and found no indication the airline likely violated the country's privacy obligations. The Office of the Australian Information Commissioner has not issued a final determination.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

Only 26% of enterprises say AI governance keeps pace with deployment, Smarsh study finds

A study by Smarsh found that only about one in four enterprises believes its AI governance practices are keeping up with the pace at which it is deploying AI tools. The findings point to a widespread gap between how fast organizations are adopting AI and how well they are managing the risks that come with it.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Why the US shows little interest in global AI governance

The United States has largely stayed on the sidelines of international efforts to coordinate AI governance, preferring domestic policy frameworks over binding multilateral agreements. This posture puts Washington at odds with allies and international bodies pushing for shared rules on AI development and deployment.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

My AI governance framework is a blast radius: Advice from a CEO

A CEO offers a reframe on AI governance, describing their approach as mapping a 'blast radius' — focusing on the scope of harm an AI system can cause rather than building compliance checklists. The perspective is aimed at practitioners trying to make governance practical inside real organizations.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

HIPAA Journal · Jul 16, 2026 · US Federal

Vision Care Providers Settle Data Breach Class Actions

Two vision care providers, Total Vision in California and Naperville-area provider Naper Vision, have agreed to settlements resolving class action lawsuits stemming from data breaches. The cases were brought under health data privacy frameworks, with affected patients seeking compensation for the exposure of their personal and medical information.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

With midterms on deck, Trump to deliver primetime speech on election security

With midterms on deck, Trump to deliver primetime speech on election security Reuters

HIPAA Journal · Jul 16, 2026 · US Federal

Ohio Living; Erlanger; Heart of America Eye Care Announce Data Breaches

Three healthcare organizations — Ohio Living, a senior living provider, Erlanger Health System in Tennessee, and Heart of America Eye Care — have each disclosed separate data breaches. All three operate in sectors covered by HIPAA, meaning the compromised data likely includes sensitive medical and personal information.

Who should care: Healthcare professionals · Privacy officers · Compliance

Cisco Talos · Jul 16, 2026 · International

The Hunter's Paradox: Is it time to embrace automated threat hunting?

Humans can no longer keep up with the volume and velocity of security data on their own, but AI can't be fully trusted. David discusses the merits of both and muses on what the future might look like.

Who should care: General readers · AI governance · Policy

BleepingComputer · Jul 16, 2026 · International

New Spirals ransomware encrypts victim network in under 24 hours

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in less than 24 hours. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

WIRED — AI · Jul 16, 2026 · International

Please Stop Making Me Opt Out of AI

A commentary piece argues that companies are systematically defaulting users into generative AI features without meaningful prior consent, pushing the burden of refusal onto individuals rather than making participation an active, informed choice. The author calls for opt-in to become the default standard for AI features that touch sensitive data or behavior.

Who should care: General readers · AI governance · Policy

OECD AI Policy Observatory · Jul 16, 2026 · International

HAIP is transforming transparency from a compliance burden to a competitive advantage

Salesforce has backed the HAIP Reporting Framework, an OECD-linked initiative aimed at standardizing how companies disclose AI governance practices. The framework is positioned as a way to reduce fragmentation across different regulatory regimes and turn transparency reporting into a market differentiator rather than a box-checking exercise.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Lawmakers Introduce Facial Recognition Bill for Sportsbooks and Prediction Markets With Kalshi’s Support

Federal lawmakers have introduced legislation that would require sportsbooks and prediction market platforms to use facial recognition technology for identity verification, with backing from prediction market operator Kalshi. The bill targets the growing online gambling and financial prediction sector as regulators and platforms debate how to verify user identity at scale.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

SANS Warns of AI Governance Gap as Use by Security Teams Surges

SANS Institute is warning that AI governance frameworks are failing to keep pace with rapid adoption of AI tools among cybersecurity teams. As security professionals increasingly rely on AI in their daily work, the policies and oversight structures meant to guide that use have not caught up.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Most enterprise AI governance is already out of date

A new report finds that most enterprise AI governance frameworks are failing to keep pace with the speed of AI deployment, leaving organizations with policies that no longer reflect how their systems actually work or what risks they now carry.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Center for HIV Law and Policy: What We Do Now: Data Privacy and Public Health in the Authoritarian Police State

The Center for HIV Law and Policy has published guidance on protecting data privacy and public health in what it describes as an authoritarian policing environment. The piece, flagged by EPIC, addresses how people living with HIV and advocates can navigate increased surveillance and data risks.

Who should care: General readers · Privacy officers · Policy