Search & browse the archive

War on the Rocks · May 27, 2026 · International

Synthetic Biology, Drones, and AI: The Risks of Dual-Use Technologies

Is it too late to stop criminals and American adversaries from exploiting AI to conduct cyberattacks or design novel pathogens? Has regulation kept pace with the threat civilian drones pose to critical infrastructure? AI researcher Lennart Heim, Army drone strategist Paul Lushenko, and CEO of Sentinel Bio Claire Qureshi join Jonathan to discuss the trade-offs between protecting the public and letting the private sector forge ahead. The conversation gets into synthetic DNA, the risk of drones at the FIFA World Cup, and whether the U.S. government should get early access to Silicon Valley’…

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

War on the Rocks · May 27, 2026 · International

Leading in the Dark: How Submarine Commanders Think Under Uncertainty

We had been tracking the contact for six hours.The acoustic signature was ambiguous. The geometry was incomplete. The tactical picture had shifted twice in the preceding hour.I ordered battle stations anyway. Not because I was certain, I was not. I ordered it because the decision window was closing. Waiting for certainty was no longer a strategy, it was a risk. That moment — the space between incomplete knowledge and irreversible action — is where submarine command lives. It is where I spent 14 years.Modern militaries have spent decades trying to eliminate that space. Networked se…

Who should care: Privacy officers · Cybersecurity

IAPP · May 27, 2026 · International

Privacy programs can't see AI connectors and that's creating a new insider threat

Privacy and compliance programs are largely blind to AI connectors — the integrations that link AI tools to internal systems and data — creating an emerging insider threat vector that existing governance frameworks were not built to catch.

Who should care: General readers · AI governance · Policy · Privacy officers

IAPP · May 27, 2026 · International

When the framework doesn't fit: AI governance for the rest of the world

A piece published via the IAPP examines how dominant AI governance frameworks may be poorly suited to countries outside the Western regulatory sphere, raising questions about whether those models adequately address the diverse legal, cultural, and institutional contexts found elsewhere in the world.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

CNIL · May 27, 2026 · EU / France

Generative AI and privacy: the PIPC and the CNIL jointly produced a poster to raise awareness among AI users about data protection

South Korea's Personal Information Protection Commission and France's data protection authority CNIL have jointly produced a public awareness poster aimed at informing everyday users of generative AI tools about data protection risks. The collaboration marks a cross-border effort by two national regulators to reach people directly rather than through industry or policy channels.

Who should care: General readers · AI governance · Policy · Privacy officers

404 Media · May 26, 2026 · International

‘BusPatrol’ Put AI Cameras in Tens of Thousands of School Buses. Now They Want to Give Cops Access

BusPatrol, a company that has installed AI-powered cameras across tens of thousands of school buses, is now seeking to give law enforcement access to that footage. The move would expand what began as a school safety and traffic enforcement tool into a broader surveillance resource for police.

Who should care: General readers · AI governance · Policy

Privacy Commissioner of Canada · May 26, 2026 · Canada

News release: Privacy Commissioner of Canada appears before Parliamentary Committee on Bill C-22

I can't write a useful briefing from this input. The excerpt contains only the words "News release" — there are no facts, context, or details to work from beyond the headline itself. To write an accurate, original briefing, I'd need at least a sentence or two from the actual release describing what

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · May 25, 2026 · Canada

Remarks by the Privacy Commissioner of Canada to the Venice Privacy Symposium – Intervention on AI governance

Canada's Privacy Commissioner delivered remarks at the Venice Privacy Symposium, offering the office's position on AI governance frameworks. The intervention signals active engagement by a major national privacy authority in shaping international norms around artificial intelligence.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers

The Guardian — Tech · May 23, 2026 · International

How big tech got its way on Trump’s AI executive order

President Trump scrapped a planned provision requiring government safety reviews of new AI models just before signing an executive order on artificial intelligence, reversing course after apparent industry pressure. The administration signaled it will prioritize AI deployment speed over pre-release oversight.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Krebs on Security · May 22, 2026 · International

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

A CISA contractor deliberately posted AWS GovCloud credentials and a large cache of agency secrets to a public GitHub repository, according to KrebsOnSecurity. Lawmakers in both chambers are now pressing CISA for answers while the agency works to revoke the exposed credentials.

Who should care: Cybersecurity · Privacy officers · Administrators

TechCrunch — Privacy · May 22, 2026 · International

Trump Mobile confirms it exposed customers’ personal data, including phone numbers and home addresses

Trump Mobile has acknowledged that a data exposure incident leaked customer personal information, including phone numbers and home addresses. The company attributed the breach to a third-party platform and said it is still assessing whether formal customer notification is required.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

IAPP · May 22, 2026 · International

A view from DC: A two-sided market of AI deception

I need to work carefully here. The excerpt provides almost no factual content beyond the headline itself — it's just the title and the publisher (IAPP). I should not invent specifics. I'll write what the headline clearly implies: a piece analyzing AI deception as a marketplace dynamic with two sides

Who should care: General readers · AI governance · Policy

Privacy Commissioner of Canada · May 22, 2026 · Canada

Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

FTC Consumer Protection · May 21, 2026 · US Federal

FTC to Require Cox Media Group, Two Other Firms to Pay Nearly $1 Million to Settle Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service

The FTC reached settlements totaling $930,000 with Cox Media Group and two partner marketing firms over allegations that they falsely marketed an AI service claiming to target ads based on audio captured from consumers' smart devices, and misrepresented that users had consented to such surveillance.

Who should care: General readers · AI governance · Policy

War on the Rocks · May 21, 2026 · International

China’s AI Governance Offensive Threatens U.S. Tech Leadership

China is actively working to shape international AI governance frameworks, including at a May 5 United Nations meeting where its vice minister of science and technology promoted Beijing's role in setting global norms. Chinese AI experts aligned with the government also recently appeared before a U.S. Senate panel to argue for China's contributions to AI safety.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

OECD AI Policy Observatory · May 21, 2026 · International

Establishing the shared foundations for collective AI security

The OECD's AI policy arm has published guidance aimed at establishing common frameworks for AI security, addressing threats such as prompt injection, model poisoning, and the risks posed by autonomous AI agents in deployment environments.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

IAPP · May 21, 2026 · International

TAKE IT DOWN Act: How to comply as the FTC begins enforcement

The TAKE IT DOWN Act, which requires platforms to remove nonconsensual intimate images including AI-generated deepfakes, has moved into active enforcement by the Federal Trade Commission. Businesses that host user content are now expected to have compliant takedown processes in place.

Who should care: Lawyers · Privacy officers · Compliance

IAPP · May 21, 2026 · International

When withdrawal cannot be effectively exercised: Rethinking consent validity under the GDPR

A legal analysis published by the IAPP examines situations under GDPR where individuals nominally retain the right to withdraw consent but face practical barriers that render that right ineffective, raising questions about whether such consent should be considered legally valid in the first place.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

IAPP · May 21, 2026 · International

Notes from the Asia-Pacific region: 2026 survey finds children's data, AI continue to top NZ privacy concerns

A 2026 survey from New Zealand finds that children's data and artificial intelligence remain the leading privacy concerns among respondents in the country, according to reporting from the IAPP. The findings suggest these issues have held sustained public and professional attention rather than fading as newer topics emerge.

Who should care: General readers · AI governance · Policy · Privacy officers

noyb (None of Your Business) · May 21, 2026 · EU

noyb success: ORF.at must correct misleading cookie banner

Austria's Federal Administrative Court has upheld a ruling requiring public broadcaster ORF to redesign its cookie consent banner so that the accept and reject buttons are visually equal. The decision, which follows a successful complaint by privacy group noyb, addresses ORF's practice of highlighting the 'Accept' button in color, which the court agreed could push users into unintended consent.

Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy

TechCrunch — Privacy · May 20, 2026 · International

Customers say Trump Mobile is leaking their personal information

Trump Mobile customers report that their personal information, including email and home addresses, is being exposed in an apparent data leak. Two YouTubers say they independently confirmed the authenticity of their own leaked data, and the company has not responded to notifications about the problem.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

FTC Consumer Protection · May 20, 2026 · US Federal

FTC Sends Warning Letters to Companies About Compliance with the TAKE IT DOWN Act

The FTC sent warning letters to roughly a dozen websites reminding them they are now legally required under the TAKE IT DOWN Act to provide a removal request mechanism for non-consensual intimate images and to take down qualifying content within 48 hours. The letters signal the agency intends to enforce the law actively.

Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy

California Privacy Protection Agency (CPPA) (.gov) · May 20, 2026 · US / State

Catbagan, Christian@CPPA

I don't have enough information to write an accurate briefing from this input. The headline and excerpt appear to be a raw email or directory entry — likely a staff listing or internal contact record for someone named Christian Catbagan at the California Privacy Protection Agency — rather than a new

Who should care: General readers · Privacy officers · Policy

IAPP · May 20, 2026 · International

How countries are regulating AI companion chatbots to protect children

Countries are developing regulatory frameworks specifically targeting AI companion chatbots, with child protection emerging as a central concern. The IAPP has examined how different jurisdictions are approaching oversight of these emotionally engaging tools that are increasingly used by minors.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy