Hackers are trying to steal Signal users’ backups in new wave of widespread attacks
A new hacking campaign is trying to trick Signal users to give up their secret recovery key, which can be used to access online backups containing past messages.
The full corpus — beyond today's front page.
733 results · page 25 of 31
A new hacking campaign is trying to trick Signal users to give up their secret recovery key, which can be used to access online backups containing past messages.
The AI governance imperative you can’t afford to ignore cio.com
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
EU AI Act Update: Timeline Relief, Targeted Simplification, and New Prohibitions Inside Global Tech
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Notes from the IAPP Europe: GDPR anniversary, 2025 annual reports and looking ahead IAPP
Who should care: Lawyers · Privacy officers · AI governance
Notable AI, privacy bills hit finish line in Illinois, Connecticut and New York IAPP
Who should care: General readers · AI governance · Policy
GDPR certification goes global, simplifying data transfers and compliance IAPP
Who should care: Lawyers · Privacy officers · AI governance · Compliance
Notes from the Asia-Pacific region: China issues new AI ethics guidelines, Hong Kong conducts compliance checks IAPP
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
France's data protection authority CNIL has imposed a €5 million fine on IQVIA, a healthcare data and analytics company, for violations related to the handling of health data.
Why this matters: Health data ranks among the most sensitive personal information, and this enforcement action signals that regulators are willing to impose meaningful financial penalties on commercial data brokers who profit from processing it without adequate legal safeguards.
Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals
News release
I draw the old way – with my hand. Doing it with AI would not make me more creative, it would drain the colour out of my existence Last week I went to a gig by myself for the first time. I sat myself down in my single seat, possibly the youngest person in the room and one of thousands excited to see Split Enz. I loved it – I felt joy and heartache as the lyrics spoke of human experiences, really lived. I happily realised that I did not have to wonder whether Split Enz had used AI in their work (as I so often do nowadays) as these bangers were created long before it was even dreamed of. As a v…
Who should care: General readers · AI governance · Policy
Patients at healthcare providers are encountering consent forms that nominally offer the right to opt out of data sharing with large health networks, but interface design prevents them from actually exercising that choice, effectively coercing consent.
Why this matters: When opt-out rights exist on paper but are deliberately obstructed in practice, informed consent becomes fiction — leaving patients' sensitive medical data flowing to third parties without meaningful control, and eroding a foundational protection in health privacy law.
Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy
Privacy programs can't see AI connectors and that's creating a new insider threat IAPP
Who should care: General readers · AI governance · Policy
The interstices of EU digital responsibility IAPP
A piece published via the IAPP examines how dominant AI governance frameworks may be poorly suited to countries outside the Western regulatory sphere, raising questions about whether those models adequately address the diverse legal, cultural, and institutional contexts found elsewhere in the world.
Why this matters: Governance frameworks that don't translate across contexts can leave individuals in non-Western countries with weaker protections against algorithmic harm, surveillance, and data misuse — effectively creating a two-tier system of rights depending on where a person lives.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Generative AI and privacy: the PIPC and the CNIL jointly produced a poster to raise awareness among AI users about data protection CNIL
Who should care: General readers · AI governance · Policy · Privacy officers
Media advisory
Domestic CCTV Data Protection Commission
Who should care: General readers · Privacy officers · Policy
Why organizations should not scale chaos IAPP
Media advisory
News release
Keynote remarks by the Privacy Commissioner of Canada to the IAPP Canada Privacy Symposium 2026
Canada's Privacy Commissioner delivered remarks at the Venice Privacy Symposium, offering the office's position on AI governance frameworks. The intervention signals active engagement by a major national privacy authority in shaping international norms around artificial intelligence.
Why this matters: How regulators frame AI governance at international forums can directly influence individuals' rights over automated decision-making and data use. A privacy-centered voice in these discussions may help anchor emerging global standards around personal autonomy rather than purely commercial or security interests.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
President Trump scrapped a planned provision requiring government safety reviews of new AI models just before signing an executive order on artificial intelligence, reversing course after apparent industry pressure. The administration signaled it will prioritize AI deployment speed over pre-release oversight.
Why this matters: Removing mandatory safety reviews reduces a key checkpoint where harms to individuals — including surveillance capabilities, biometric systems, or discriminatory automation — might be caught before public deployment, leaving affected people with fewer protections and less recourse.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.
Who should care: Cybersecurity · Privacy officers · Administrators