Untitled
Untitled Data Protection Commission
Who should care: General readers · Privacy officers · Policy
The full corpus — beyond today's front page.
824 results · page 32 of 35
Untitled Data Protection Commission
Who should care: General readers · Privacy officers · Policy
Data Protection Commission Publishes Final Decision Following Inquiry into Permanent TSB Data Protection Commission
Who should care: General readers · Privacy officers · Policy
Safe and Ethical AI: a big European idea for the world miriam Thu, 05/07/2026 - 16:04 Fri, 05/08/2026 - 12:00 On 9 May, Europeans celebrate Europe Day. Europe has continued to shape big ideas that unite people around shared values & fundamental rights. Our commitment to human-centric, transparent technology remains more important than ever. 1 Read the blog post
Who should care: General readers · AI governance · Policy
Media advisory
News release
Who should care: Lawyers · Privacy officers · Compliance
News release
New guidance to support public authorities dealing with AI-generated FOI requests Information Commissioner's Office
Who should care: Lawyers · Compliance · General readers · AI governance · Policy
Privacy regulators from multiple jurisdictions are set to publicly discuss the findings of a coordinated joint investigation into ChatGPT, signaling a formal multinational regulatory examination of the AI system's data practices.
Why this matters: A unified international regulatory front examining ChatGPT could establish precedents governing how AI systems collect, retain, and process personal data — with direct implications for individuals whose information may have been ingested or generated without clear consent.
Who should care: Lawyers · Privacy officers · Compliance
Statement by the Privacy Commissioner of Canada regarding a joint investigation of OpenAI’s ChatGPT
Who should care: Lawyers · Privacy officers · Compliance
Canadian federal and provincial privacy regulators concluded a joint investigation into OpenAI's ChatGPT, resulting in commitments from the company to strengthen how it handles Canadians' personal information. The investigation examined whether ChatGPT's data practices complied with Canadian privacy law.
Why this matters: The outcome signals that coordinated regulatory pressure can extract concrete privacy commitments from major AI platforms, offering a potential model for curbing how large language models collect and process individuals' data without meaningful consent.
Who should care: Lawyers · Privacy officers · Compliance
DPC Opens Inquiry into Infinite Styles Services Co. Ltd. (SHEIN Ireland) Data Protection Commission
Who should care: General readers · Privacy officers · Policy
The FTC has reached a settlement barring data broker Kochava and its subsidiary from selling sensitive location data without consumers' explicit consent, following allegations the companies traded precise movement data tied to hundreds of millions of mobile devices, including visits to sensitive locations.
Why this matters: The case highlights how commercial data brokers can quietly monetize individuals' physical movements — including visits to medical or religious sites — without their knowledge, underscoring the gap between lawful data collection and meaningful consent.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
News release
Who should care: Lawyers · Compliance
UK biometrics commissioners have cautioned that regulatory frameworks governing AI-powered facial recognition are failing to keep pace with rapid deployment, as London's Metropolitan Police nearly doubled the volume of faces scanned in the past year and retailers expand their own use of the technology.
Why this matters: Millions of people are being passively scanned in public and commercial spaces with limited legal safeguards — raising serious concerns about presumption of innocence, given documented false-positive rates, and the normalization of continuous biometric surveillance without meaningful consent or redress.
Who should care: Lawyers · Compliance · Privacy officers · Cybersecurity · General readers · AI governance · Policy
Live facial recognition has been used by UK police since 2020, primarily in London, and the current Labour government is now pushing for nationwide adoption, including 40 new camera-equipped vans for deployment across England and Wales town centres.
Why this matters: Mass deployment of always-on facial recognition in public spaces means ordinary people are effectively subject to biometric surveillance without consent, raising due-process concerns — particularly given documented risks of misidentification that fall disproportionately on minority communities.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
The UK's Trades Union Congress is calling for a ban on algorithm-driven dynamic pay on gig platforms like Uber, arguing the practice severs the link between effort and earnings, leaving workers with unpredictable income determined by opaque automated systems.
Why this matters: When consequential decisions about people's livelihoods are delegated to undisclosed algorithms, workers lose meaningful insight into — or recourse against — the logic controlling them, raising broader questions about algorithmic transparency and individuals' right to understand systems that govern their daily lives.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy · Privacy officers
A dataset from UK Biobank — a large longitudinal health research repository — reportedly appeared for sale on Alibaba's platform in China, prompting concern among researchers and a warning from UK Science Minister Patrick Vallance that further such attempts are anticipated. Columnist Polly Toynbee argues the research value of such studies outweighs the risks.
Why this matters: The incident illustrates that even well-governed research databases carrying sensitive, long-term health records are vulnerable to unauthorized distribution, raising questions about whether participants' informed consent extends to scenarios where their data surfaces on foreign commercial platforms beyond any regulator's reach.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Additional confidential health records from UK Biobank's 500,000 volunteers have appeared for sale on Alibaba following last week's initial breach, with Science Minister Patrick Vallance confirming the government is coordinating with Chinese authorities to remove the listings and anticipating further exposures.
Why this matters: Volunteers donated sensitive biological and medical data under an expectation of research use, not commercial exposure; the ongoing resurfacing of that data on a foreign marketplace highlights how breaches of biomedical repositories can strip individuals of control over their most intimate personal information with limited immediate recourse.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Final storage and access technologies guidance published Information Commissioner's Office
Who should care: Lawyers · Compliance
Despite promising to help determine what happened with the hacks targeting journalists and activists in Italy, Israeli American spyware maker Paragon has reportedly not responded to authorities’ requests for information.
Who should care: Privacy officers · Cybersecurity
The U.S. top court is expected to rule on whether to allow police to identify criminal suspects by dragnet searching the databases of tech giants.
Who should care: Lawyers · Compliance
Charities given new flexibility to contact supporters under data law change Information Commissioner's Office
UK Information Commissioner John Edwards has temporarily stepped aside while the ICO conducts an independent internal investigation into undisclosed workplace conduct. Edwards, who heads the country's primary data protection and information rights authority, announced his cooperation via LinkedIn.
Why this matters: The voluntary recusal of the UK's chief privacy regulator creates a leadership vacuum at the body responsible for enforcing data protection rights — raising questions about continuity of oversight at a moment when both AI governance and public-sector surveillance are under active scrutiny.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
Researchers have found a new case where government authorities used a fake Android app to plant spyware on a target’s phone. The company that allegedly developed the spyware was not previously known to sell this type of software.
Who should care: Privacy officers · Cybersecurity