Why organizations should not scale chaos
Why organizations should not scale chaos IAPP
The full corpus — beyond today's front page.
764 results · page 27 of 32
Why organizations should not scale chaos IAPP
Media advisory
News release
Keynote remarks by the Privacy Commissioner of Canada to the IAPP Canada Privacy Symposium 2026
Canada's Privacy Commissioner delivered remarks at the Venice Privacy Symposium, offering the office's position on AI governance frameworks. The intervention signals active engagement by a major national privacy authority in shaping international norms around artificial intelligence.
Why this matters: How regulators frame AI governance at international forums can directly influence individuals' rights over automated decision-making and data use. A privacy-centered voice in these discussions may help anchor emerging global standards around personal autonomy rather than purely commercial or security interests.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
President Trump scrapped a planned provision requiring government safety reviews of new AI models just before signing an executive order on artificial intelligence, reversing course after apparent industry pressure. The administration signaled it will prioritize AI deployment speed over pre-release oversight.
Why this matters: Removing mandatory safety reviews reduces a key checkpoint where harms to individuals — including surveillance capabilities, biometric systems, or discriminatory automation — might be caught before public deployment, leaving affected people with fewer protections and less recourse.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.
Who should care: Cybersecurity · Privacy officers · Administrators
CPDP 2026 - Closing remarks francesco Fri, 05/22/2026 - 18:03 Fri, 05/22/2026 - 12:00 1 Read the speech
President Trump’s branded cell phone maker and cell provider said the exposure was linked to a third-party platform and was evaluating whether it needs to notify customers.
Who should care: Cybersecurity · Privacy officers · Administrators
Following a joint investigation by The Markup and CalMatters that exposed how website code was obstructing Californians' ability to submit data deletion requests, much of that obstructive code has since been removed from broker sites.
Why this matters: The episode illustrates how technical design choices — not just legal frameworks — can quietly undermine individuals' statutory privacy rights, and that independent accountability journalism can compel real-world changes in how those rights are exercised.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
US states urge Congress to renew cybersecurity grants IAPP
Notes from the IAPP Canada: Regulators sharpen focus on children's privacy IAPP
Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy
A view from DC: A two-sided market of AI deception IAPP
Who should care: General readers · AI governance · Policy
Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts
The Federal Trade Commission will require Cox Media Group (CMG) and two smaller marketing firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into such targeting. In three separate complaints, the FTC alleged that Georgia-based media and marketing company CMG Media Corporation, which does business as Cox Media Group, and two marketing firms it worked with, New Hampshire-based MindSift LLC and Wi…
Who should care: General readers · AI governance · Policy
The OECD's AI policy arm has published guidance aimed at establishing common frameworks for AI security, addressing threats such as prompt injection, model poisoning, and the risks posed by autonomous AI agents in deployment environments.
Why this matters: How AI security baselines are defined at an international level will shape what protections exist against manipulated or compromised systems that increasingly mediate access to personal data and make consequential decisions about individuals.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
£355,880.10 confiscation order secured following proceeds of crime hearing Information Commissioner's Office
ICO statement on age assurance Information Commissioner's Office
Who should care: Lawyers · Privacy officers · AI governance
TAKE IT DOWN Act: How to comply as the FTC begins enforcement IAPP
Who should care: Lawyers · Privacy officers · Compliance
A legal analysis published by the IAPP examines situations under GDPR where individuals nominally retain the right to withdraw consent but face practical barriers that render that right ineffective, raising questions about whether such consent should be considered legally valid in the first place.
Why this matters: If consent is treated as valid despite being practically irrevocable, individuals lose meaningful control over their personal data — reducing a core privacy right to a procedural formality rather than a genuine safeguard against ongoing data collection.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
A view from Brussels: e-Evidence implementation deadline looms IAPP
Notes from the Asia-Pacific region: 2026 survey finds children's data, AI continue to top NZ privacy concerns IAPP
Who should care: General readers · AI governance · Policy
Submission to the Standing Committee on Public Safety and National Security on its study of Bill C-22, An Act Respecting Lawful Access
Trump Mobile is leaking customers’ email and home addresses but has not responded to people alerting the company of the data exposure, according to two YouTubers who said they verified that their leaked data is authentic.
Who should care: Cybersecurity · Privacy officers · Administrators