Search & browse the archive

Facewatch retail facial recognition to notify police of repeat offender matches

Facewatch, a UK facial recognition service used by retailers, is expanding its system to automatically notify police when a person flagged as a repeat offender is identified in a store. The move extends the technology's reach beyond private security alerts into direct law enforcement integration.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

The Record · Jul 13, 2026 · International

Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach

Russian journalist Ksenia Sobchak says hackers gained access to her Telegram channels through an email breach, after screenshots of her private correspondence with political figures were published online. Sobchak has denied the authenticity of the leaked messages, calling them fabricated.

Who should care: Cybersecurity · Privacy officers · Administrators

Military Times · Jul 13, 2026 · US Federal

US creates task force to prosecute leaks to news media, Hegseth says

The Justice Department and Pentagon have established a joint task force focused on identifying and prosecuting government leaks to news organizations, according to Defense Secretary Pete Hegseth. The move marks a formal, coordinated escalation of the federal government's effort to pursue unauthorized disclosures to journalists.

Who should care: Cybersecurity · Privacy officers · Administrators

IAPP · Jul 13, 2026 · International

Thought for the week: Web scraping for generative AI is subject to the GDPR

A commentary from the IAPP argues that web scraping used to build generative AI training datasets falls within the scope of GDPR, meaning the collection and processing of personal data found online is not exempt simply because it occurs at scale or at the infrastructure level.

Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy

Nextgov/FCW · Jul 13, 2026 · US Federal

DHS network intrusion was twice ruled a false positive before breach confirmed

Suspicious network activity on a Department of Homeland Security system supporting U.S. World Cup operations was initially flagged twice as a false positive before investigators confirmed an actual intrusion had occurred. The breach involved the Homeland Security Information Network, a platform used to coordinate security efforts around the event.

Who should care: Cybersecurity · Privacy officers · Administrators

Krebs on Security · Jul 13, 2026 · International

Lessons Learned from CISA’s Recent GitHub Leak

CISA released a postmortem after a contractor accidentally published dozens of internal credentials, including AWS GovCloud keys, to a public GitHub repository, where they sat exposed for nearly six months before journalist Brian Krebs alerted the agency. Security experts say the incident reveals gaps in how CISA detected and responded to the exposure.

Who should care: Cybersecurity · Privacy officers · Administrators

The Guardian — Tech · Jul 13, 2026 · International

Albanese to compare pivotal moment in AI to renewable energy transition as he outlines approach

Australian Prime Minister Anthony Albanese is set to deliver a major speech on AI this week, framing the technology as a societal turning point comparable to the shift to renewable energy. He is expected to address safety concerns but will not announce any updates on copyright protections for artists and creative industries.

Who should care: General readers · AI governance · Policy

IAPP · Jul 13, 2026 · International

The state of enforcement: Part II — Kids and teens’ privacy

A new IAPP enforcement review examines how regulators are applying children's and teenagers' privacy laws, tracking the current landscape of enforcement actions and compliance expectations for organizations that collect data from younger users.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

China's Xi to address Global AI Governance summit in Shanghai

Chinese President Xi Jinping is set to address a global AI governance summit in Shanghai, signaling Beijing's intent to play a visible role in shaping international norms around artificial intelligence. The summit brings together participants to discuss frameworks for managing AI development and deployment.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

BleepingComputer · Jul 13, 2026 · International

Lidl discloses online shop breach after service provider hack

Lidl has notified customers in Germany, Belgium, and the Netherlands that their personal data was stolen through a breach at a third-party service provider. The discount supermarket chain disclosed the incident after attackers compromised the external vendor rather than Lidl's own systems.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

TechCrunch — Privacy · Jul 13, 2026 · International

LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy

The Los Angeles Police Department has allowed its contract with Flock Safety, a major automated license plate reader company, to lapse after citing serious civil liberties and privacy concerns. LAPD had been one of Flock's largest government clients.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

BleepingComputer · Jul 13, 2026 · International

Breach at the Beach: Play the Ultimate Entra ID CTF

Varonis has released a free, hands-on Capture the Flag challenge designed to teach security practitioners how attackers exploit Microsoft Entra ID, using realistic scenarios to simulate common identity-based attack techniques.

Who should care: Cybersecurity · Privacy officers · Administrators

EU imposes sanctions on Russians over human rights and cybercrime

EU imposes sanctions on Russians over human rights and cybercrime Reuters

EPIC · Jul 13, 2026 · US Federal

EPIC, CFA, Fairplay Submit Recommendations Ahead of Potential Rulemaking for Colorado Automated Decision-Making and Chatbot Laws

EPIC, the Consumer Federation of America, and Fairplay submitted formal comments to the Colorado Department of Law in response to its request for stakeholder input ahead of potential rulemaking under Colorado's new laws governing chatbot safety and automated decision-making in consequential decisions.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy · Privacy officers

Global Privacy Control — what businesses need to know

Global Privacy Control (GPC) is a browser-based signal that lets users tell websites to stop selling or sharing their personal data automatically. Regulators in several jurisdictions have begun treating it as a legally recognized opt-out, putting businesses on notice that ignoring it may mean ignoring the law.

Who should care: General readers · Privacy officers · Policy

Cyber Monday: Regulating facial recognition

A segment examining the regulatory landscape around facial recognition technology explores how policymakers and advocates are approaching oversight of a tool increasingly used in commercial and government settings. The discussion centers on what rules, if any, should govern when and how facial recognition can be deployed.

Who should care: Lawyers · Compliance · Privacy officers · Cybersecurity · General readers · Policy

Just Security · Jul 13, 2026 · US Federal

Civilian Protection in the Age of Military AI: What Congress’s New Legislative Proposals Reveal About Emerging Safeguards

Senate lawmakers are advancing legislation to shape how the Department of Defense builds and deploys artificial intelligence in military operations. The proposals reflect growing congressional attention to setting boundaries around AI use in contexts where decisions can carry lethal consequences.

Who should care: Lawyers · Compliance · General readers · AI governance · Policy

The Guardian — Tech · Jul 13, 2026 · International

The New York nurses replaced by AI: ‘It should concern every patient who cares about quality of care’

Montefiore hospital in the Bronx laid off 12 utilization review nurses, replacing them with AI software. The New York State Nurses Association says the move violates a contract the union recently secured through a strike.

Who should care: General readers · AI governance · Policy

There’s more than bargains at Grocery Outlet. There’s also AI facial recognition.

Grocery Outlet, a discount grocery chain, has been found using AI-powered facial recognition technology in its stores. The deployment appears to have proceeded without prominent public disclosure to shoppers.

Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy

Hudson Public Schools considering facial recognition-based security system

Hudson Public Schools is weighing the adoption of a facial recognition system as part of its security infrastructure. The proposal is under community consideration, with no final decision reported yet.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

Senator Warner Makes a First Foray into Agentic AI Regulation

Senator Mark Warner has taken an early legislative step toward regulating agentic AI systems, marking one of the first moves by a sitting U.S. senator to address AI that can act autonomously on behalf of users rather than simply generate responses.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

Why do US bankers want more AI regulation than Europeans?

U.S. banking executives are reportedly pushing for stronger AI regulation, a stance that contrasts with their European counterparts who appear more resistant to new rules. The dynamic inverts the usual assumption that American financial players favor lighter regulatory touch compared to Europe.

Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy

HIPAA Journal · Jul 13, 2026 · US Federal

Marlboro-Chesterfield Pathology Agrees to Settle Lawsuit Over 2025 Ransomware Attack

Marlboro-Chesterfield Pathology, a molecular, cytology, and pathology lab based in Pinehurst, North Carolina, has agreed to settle a class action lawsuit stemming from a ransomware attack that occurred in 2025. The settlement resolves claims brought by patients whose data was potentially exposed in the breach.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

Schneier on Security · Jul 13, 2026 · International

AI Data Centers and the Concentration of Wealth

This essay was written with Nathan E. Sanders, and originally appeared in The Guardian. Opposition to AI data centers has emerged as a primary theme in US politics, one that—surprisingly—doesn’t fall along party lines. We applaud people coming together for constructive debate on any issue, and agree that communities need to evaluate whether any economic benefits these data centers bring is worth their costs. Still, we worry that a focus on data centers obscures the larger impacts of AI on people’s lives: the concentration of power of AI companies, and their widespread…

Who should care: General readers · AI governance · Policy