A view from DC: A two-sided market of AI deception
A view from DC: A two-sided market of AI deception IAPP
Who should care: General readers · AI governance · Policy
The full corpus — beyond today's front page.
824 results · page 30 of 35
A view from DC: A two-sided market of AI deception IAPP
Who should care: General readers · AI governance · Policy
Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts
The Federal Trade Commission will require Cox Media Group (CMG) and two smaller marketing firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into such targeting. In three separate complaints, the FTC alleged that Georgia-based media and marketing company CMG Media Corporation, which does business as Cox Media Group, and two marketing firms it worked with, New Hampshire-based MindSift LLC and Wi…
Who should care: General readers · AI governance · Policy
The OECD's AI policy arm has published guidance aimed at establishing common frameworks for AI security, addressing threats such as prompt injection, model poisoning, and the risks posed by autonomous AI agents in deployment environments.
Why this matters: How AI security baselines are defined at an international level will shape what protections exist against manipulated or compromised systems that increasingly mediate access to personal data and make consequential decisions about individuals.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
£355,880.10 confiscation order secured following proceeds of crime hearing Information Commissioner's Office
ICO statement on age assurance Information Commissioner's Office
Who should care: Lawyers · Privacy officers · AI governance
TAKE IT DOWN Act: How to comply as the FTC begins enforcement IAPP
Who should care: Lawyers · Privacy officers · Compliance
A legal analysis published by the IAPP examines situations under GDPR where individuals nominally retain the right to withdraw consent but face practical barriers that render that right ineffective, raising questions about whether such consent should be considered legally valid in the first place.
Why this matters: If consent is treated as valid despite being practically irrevocable, individuals lose meaningful control over their personal data — reducing a core privacy right to a procedural formality rather than a genuine safeguard against ongoing data collection.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
A view from Brussels: e-Evidence implementation deadline looms IAPP
Notes from the Asia-Pacific region: 2026 survey finds children's data, AI continue to top NZ privacy concerns IAPP
Who should care: General readers · AI governance · Policy
Submission to the Standing Committee on Public Safety and National Security on its study of Bill C-22, An Act Respecting Lawful Access
Trump Mobile is leaking customers’ email and home addresses but has not responded to people alerting the company of the data exposure, according to two YouTubers who said they verified that their leaked data is authentic.
Who should care: Cybersecurity · Privacy officers · Administrators
The Federal Trade Commission sent warning letters today to a dozen websites advising them of their obligation to comply with the TAKE IT DOWN Act (TIDA), which requires platforms to give people a way to request the removal of intimate photos or videos shared online without their consent, and to remove the intimate photos or videos within 48 hours of a valid request. “Today we’re demonstrating just how serious we are about protecting the public, especially children, from abusive online conduct,” said FTC Chairman Andrew N. Ferguson. “Platforms no longer have any excuses—they must comply with t…
Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy
Glasgow-based energy company fined £160,000 for making unsolicited marketing calls Information Commissioner's Office
Who should care: Lawyers · Privacy officers · Compliance
How countries are regulating AI companion chatbots to protect children IAPP
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
AI such as Mythos Preview raises the urgency of cross-border flows of cybersecurity data IAPP
Who should care: General readers · AI governance · Policy
The FTC has begun enforcing the TAKE IT DOWN Act, which compels online platforms to remove nonconsensual intimate imagery upon victim request. The agency launched a dedicated complaint portal where affected individuals can report platforms that fail to establish or honor removal procedures.
Why this matters: The law extends meaningful data-removal rights to victims of image-based abuse, establishing a federal accountability mechanism for platforms. How broadly the FTC interprets compliance requirements will shape whether platforms build robust, privacy-protective takedown systems or treat them as procedural minimums.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
The European Union is integrating AI systems into healthcare, manufacturing, transportation, and agriculture, framing the initiative around the concept of 'trustworthy AI' as a means to strengthen economic competitiveness across member states.
Why this matters: Large-scale AI deployment across health and mobility sectors raises questions about data collection, algorithmic decision-making, and individual oversight — tests of whether the EU's trustworthy AI framework translates into meaningful protections in practice.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
One month to go: what businesses need to know to meet new data law Information Commissioner's Office
Annual report: CNIL's achievements and key actions in 2025 CNIL
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.
Who should care: Cybersecurity · Privacy officers · Administrators
Our advice to government on potential changes to online advertising rules Information Commissioner's Office
Who should care: Lawyers · Compliance
Privacy for everyone: Why accessibility belongs at the center of modern privacy programs IAPP
Thought for the week: Is Poland's ABW report a sign of the trajectory of nation-state cyberattacks? IAPP