Search & browse the archive

Privacy Commissioner of Canada · May 14, 2026 · Canada

Letter to the Standing Committee on Access to Information, Privacy and Ethics on the Main Estimates for the Office of the Privacy Commissioner of Canada for 2026-2027

The Office of the Privacy Commissioner of Canada submitted a letter to Parliament's ethics and privacy committee outlining its budget request for the 2026-2027 fiscal year. The submission is part of the standard Main Estimates process through which federal oversight bodies request funding from Parliament.

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · May 14, 2026 · Canada

Letter to the Standing Senate Committee on Rules, Procedures and the Rights of Parliament on its study on the inclusion of provisions relating to e-petitions into the Rules of the Senate

Letter to the Standing Senate Committee on Rules, Procedures and the Rights of Parliament on its study on the inclusion of provisions relating to e-petitions into the Rules of the Senate

Who should care: Lawyers · Compliance

Privacy Commissioner of Canada · May 14, 2026 · Canada

Letter to the Standing Committee on Procedure and House Affairs on the privacy implications of Bill C-25

I need to reason carefully here. The headline and excerpt are identical and minimal — they tell me a letter was sent to a Canadian parliamentary committee about the privacy implications of Bill C-25. Bill C-25 relates to Canadian electoral or parliamentary procedure (the Standing Committee on Proced

Who should care: General readers · Privacy officers · Policy

FTC Consumer Protection · May 13, 2026 · US Federal

Shutterstock to Pay $35 Million to Settle FTC Allegations Over Illegal Subscription and Cancellation Practices

Shutterstock has agreed to pay $35 million to settle FTC allegations that it charged consumers without clear consent and deliberately made subscriptions hard to cancel. The agency found the platform engaged in a range of deceptive billing practices that generated tens of millions of dollars from affected customers.

Who should care: General readers · Privacy officers · Policy

IAPP · May 13, 2026 · International

Companies pair up to release Automated AI Governance Package

Two companies have jointly launched an automated AI governance package, targeting organizations seeking structured tools to manage compliance and oversight of artificial intelligence systems. The product appears aimed at streamlining governance workflows, though specific technical details and partner identities were not disclosed in the announcement.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

IAPP · May 13, 2026 · International

The AI governance conversation is happening in the wrong room

A piece published through the IAPP argues that current AI governance discussions are taking place in forums or among stakeholders that exclude key voices, suggesting the existing deliberative spaces are misaligned with the breadth of interests at stake.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

IAPP · May 13, 2026 · International

From privacy policies to machine-readable governance: Rethinking data control in the age of AI

A piece published through the IAPP examines the limitations of traditional privacy policies as a governance tool and makes the case for machine-readable formats that AI systems can interpret and enforce directly, rather than relying on humans to read and comply with written rules.

Who should care: General readers · AI governance · Policy · Privacy officers

IAPP · May 13, 2026 · International

Maryland enacts a first-of-its-kind surveillance pricing law, but there are loopholes

Maryland has passed what is being described as the first law of its kind targeting surveillance-based pricing, where companies use personal data to charge individuals different prices. The law contains notable loopholes that may limit how much it actually constrains the practice.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

IAPP · May 13, 2026 · International

Amendments move Colorado AI Act's focus from risk to transparency

Proposed amendments to Colorado's AI Act would shift the law's regulatory emphasis away from risk-based obligations for developers and deployers toward transparency and disclosure requirements, representing a notable recalibration of how the state approaches AI governance.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Krebs on Security · May 12, 2026 · International

Patch Tuesday, May 2026 Edition

Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers -- including Apple, Google, Microsoft, Mozilla and Oracle -- fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

The Guardian — Privacy · May 11, 2026 · International

Palantir’s access to identifiable NHS England patient data is ‘dangerous’, MPs say

UK parliamentarians have raised alarms over NHS England granting Palantir and other contractors broad access to identifiable patient records — before pseudonymisation — as part of an AI platform development project. Internal NHS documents reportedly acknowledged the arrangement carries a risk of eroding public trust.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

FTC Consumer Protection · May 11, 2026 · US Federal

FTC Chairman Ferguson Advises Companies to Comply with the Take It Down Act

FTC Chairman Andrew Ferguson sent letters to more than a dozen major technology companies, including Amazon, Alphabet, and Apple, reminding them they must comply with the Take It Down Act by May 19. The law requires covered platforms to create a process for victims, including minors, to request removal of nonconsensual intimate images.

Who should care: General readers · Privacy officers · Policy

Data Protection Commission · May 11, 2026 · EU / Ireland

SME ARC Conference – Croke Park May 11th

Ireland's Data Protection Commission is participating in the SME ARC Conference, scheduled for May 11th at Croke Park.

Who should care: General readers · Privacy officers · Policy

Information Commissioner's Office · May 11, 2026 · UK

Fine of nearly £1m issued against South Staffordshire Plc and South Staffordshire Water Plc following major cyber attack and data breach

The UK's Information Commissioner's Office has levied a fine of approximately £1 million against South Staffordshire Plc and its water utility subsidiary following a significant cyberattack that resulted in a personal data breach affecting customers.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

Data Protection Commission · May 11, 2026 · EU / Ireland

ARC Conference

I don't have enough information to write an accurate briefing from this input. The headline and excerpt provide only a name ("ARC Conference") and an entity ("Data Protection Commission") with no factual detail about what happened, what was announced, or what was decided. To write a briefing that m

Who should care: General readers · Privacy officers · Policy

LINC CNIL · May 11, 2026 · EU / France

Smart glasses: what was old is new again?

Smart glasses: what was old is new again? LINC CNIL

LINC CNIL · May 11, 2026 · EU / France

[Survey] – How do the French view smart glasses?

[Survey] – How do the French view smart glasses? LINC CNIL

Data Protection Commission · May 09, 2026 · EU / Ireland

Untitled

It looks like the headline and excerpt came through blank — only "Untitled" and a reference to the Data Protection Commission were passed along, with no actual story content. Could you paste the real headline and excerpt? Once you do, I'll write the briefing right away.

Who should care: General readers · Privacy officers · Policy

Data Protection Commission · May 08, 2026 · EU / Ireland

Data Protection Commission Publishes Final Decision Following Inquiry into Permanent TSB

I need to work with limited information here — the excerpt is essentially just the headline repeated with no additional detail. I'll write based on what the headline reasonably implies: Ireland's DPC completed a formal inquiry into Permanent TSB and issued a final decision. ```json { "summary": "

Who should care: General readers · Privacy officers · Policy

EDPS · May 07, 2026 · EU

Safe and Ethical AI: a big European idea for the world

The European Union is using Europe Day on May 9 to reaffirm its position that AI development should be grounded in human rights, transparency, and ethical standards. The message frames Europe's regulatory approach as a model with global relevance.

Who should care: General readers · AI governance · Policy

Privacy Commissioner of Canada · May 07, 2026 · Canada

Media advisory: Privacy Commissioner of Canada to appear before Parliamentary Committee to discuss 2026-2027 Main Estimates

Canada's Privacy Commissioner is scheduled to appear before a Parliamentary committee to discuss the federal agency's proposed budget for the 2026–2027 fiscal year. The appearance gives legislators a formal opportunity to scrutinize how the office plans to allocate its resources.

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · May 07, 2026 · Canada

News release: Privacy Commissioner of Canada investigation into breaches leads to Canada Revenue Agency commitment to improve security measures

I need to work from what the headline implies: Canada's Privacy Commissioner investigated data breaches at the Canada Revenue Agency, and the CRA has committed to improving its security practices as a result. ```json { "summary": "Canada's Privacy Commissioner completed an investigation into data

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

Privacy Commissioner of Canada · May 07, 2026 · Canada

News release: Privacy Commissioner of Canada appears before Standing Committee on Access to Information, Privacy and Ethics on Main Estimates

I need to work with what the headline and excerpt actually imply. The excerpt is minimal ("News release"), but the headline tells me the Privacy Commissioner of Canada appeared before a parliamentary committee to discuss the Main Estimates — meaning budget and resource allocations for the Office of

Who should care: General readers · Privacy officers · Policy

Dragos · May 06, 2026 · International

AI in the Breach: How an Adversary Leveraged AI to Target a Water Utility’s OT

Dragos has documented a case in which an adversary used AI tools to target the operational technology systems of a water utility. The incident marks a notable shift in how attackers are approaching critical infrastructure, using AI to probe or exploit systems that control physical processes.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy