Search & browse the archive

EFF — Deeplinks · Jun 04, 2026 · International

EFF Testifies to Congress on Protecting Americans’ Rights from Government AI

The Electronic Frontier Foundation testified before a House Homeland Security subcommittee, urging Congress to pair any government adoption of AI with explicit safeguards for constitutional rights. EFF's senior policy analyst warned that using generative AI for mass government surveillance could amplify existing civil liberties violations at a scale previously impossible.

Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy

EDPB · Jun 04, 2026 · EU

The Italian SA fined Poste Vita for data breach

Italy's data protection authority issued an administrative fine against insurance firm Poste Vita S.p.A. following a customer complaint alleging unauthorized disclosure of personal data. The regulator found violations of GDPR principles governing data processing and breach-notification obligations.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy

Amazon sued over Ring facial recognition technology

Amazon is facing a lawsuit over the use of facial recognition technology in its Ring home security products. The legal action targets how the company allegedly deploys biometric identification through its consumer surveillance devices.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

Job Listing: Senior Research Fellow, Cybersecurity & AI Policy

The Foundation for American Innovation is hiring a Senior Research Fellow to work on cybersecurity and AI policy. The role is focused on research and appears aimed at shaping policy positions in both areas.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Amazon sued over Ring facial recognition, plaintiffs seeking $5M

Amazon is facing a lawsuit alleging its Ring devices engaged in unauthorized facial recognition, with plaintiffs seeking $5 million in damages. The case targets biometric data practices tied to Ring's home security camera ecosystem.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

Amazon faces class action suit over Ring facial recognition feature

Amazon is facing a class action lawsuit over a facial recognition feature in its Ring home security products. The suit appears to center on how the company collects, stores, or uses biometric data captured by Ring devices.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

IAPP · Jun 03, 2026 · International

Unpacking the White House executive order on frontier AI, cybersecurity

The White House has issued an executive order addressing frontier AI and cybersecurity, signaling a federal policy move to shape how advanced AI systems are developed and secured at the national level. The order appears to establish directives touching both the capabilities of cutting-edge AI models and the security frameworks surrounding them.

Who should care: General readers · AI governance · Policy

Amazon faces class action lawsuit over Ring facial-recognition feature

Amazon is facing a class action lawsuit over a facial recognition feature in its Ring home security product. The suit appears to center on the collection or use of biometric data without adequate notice or consent.

Who should care: Lawyers · Privacy officers · Compliance

Video: DHS facial recognition tool used in immigration sweeps raises privacy concerns

The Department of Homeland Security is reportedly using a facial recognition tool as part of immigration enforcement operations, according to reporting that has surfaced video documentation of the practice. The use of the technology in immigration sweeps has drawn scrutiny from privacy advocates.

Who should care: Privacy officers · Cybersecurity · General readers · Policy

The Guardian — Tech · May 23, 2026 · International

How big tech got its way on Trump’s AI executive order

President Trump scrapped a planned provision requiring government safety reviews of new AI models just before signing an executive order on artificial intelligence, reversing course after apparent industry pressure. The administration signaled it will prioritize AI deployment speed over pre-release oversight.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Krebs on Security · May 22, 2026 · International

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

A CISA contractor deliberately posted AWS GovCloud credentials and a large cache of agency secrets to a public GitHub repository, according to KrebsOnSecurity. Lawmakers in both chambers are now pressing CISA for answers while the agency works to revoke the exposed credentials.

Who should care: Cybersecurity · Privacy officers · Administrators

IAPP · May 22, 2026 · International

US states urge Congress to renew cybersecurity grants

US states urge Congress to renew cybersecurity grants IAPP

Privacy Commissioner of Canada · May 22, 2026 · Canada

Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

Submission to the Standing Senate Committee on National Security, Defence and Veterans Affairs on Bill C-8, An Act respecting cyber security, amending the Telecommunications Act and making consequential amendments to other Acts

OECD AI Policy Observatory · May 21, 2026 · International

Establishing the shared foundations for collective AI security

The OECD's AI policy arm has published guidance aimed at establishing common frameworks for AI security, addressing threats such as prompt injection, model poisoning, and the risks posed by autonomous AI agents in deployment environments.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Privacy Commissioner of Canada · May 21, 2026 · Canada

Submission to the Standing Committee on Public Safety and National Security on its study of Bill C-22, An Act Respecting Lawful Access

Submission to the Standing Committee on Public Safety and National Security on its study of Bill C-22, An Act Respecting Lawful Access

IAPP · May 20, 2026 · International

AI such as Mythos Preview raises the urgency of cross-border flows of cybersecurity data

Advanced AI systems like Mythos Preview are intensifying debates around the cross-border transfer of cybersecurity data, as the capabilities of such tools depend on access to threat intelligence that routinely moves across national boundaries. The development draws renewed attention to how existing data localization rules and transfer frameworks handle security-sensitive information.

Who should care: General readers · AI governance · Policy

Krebs on Security · May 18, 2026 · International

CISA Admin Leaked AWS GovCloud Keys on Github

A contractor working for CISA left highly privileged AWS GovCloud credentials and internal system details exposed in a public GitHub repository until this past weekend. Security experts described the leaked archive, which included details about how the agency builds and deploys its own software, as one of the most serious government data exposures in recent memory.

Who should care: Cybersecurity · Privacy officers · Administrators

IAPP · May 15, 2026 · International

How Canada is approaching the evolving cybersecurity landscape

How Canada is approaching the evolving cybersecurity landscape IAPP

Information Commissioner's Office · May 14, 2026 · UK

Five steps to protect your organisation from AI-powered cyber threats

The UK's Information Commissioner's Office has published guidance outlining five steps organisations can take to defend against cyber threats that are being amplified or enabled by artificial intelligence. The guidance is aimed at helping organisations strengthen their security posture as AI tools become more accessible to bad actors.

Who should care: General readers · AI governance · Policy

Krebs on Security · May 12, 2026 · International

Patch Tuesday, May 2026 Edition

Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers -- including Apple, Google, Microsoft, Mozilla and Oracle -- fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.

Who should care: AI governance · Lawyers · Administrators · General readers · Policy

Privacy Commissioner of Canada · May 07, 2026 · Canada

News release: Privacy Commissioner of Canada investigation into breaches leads to Canada Revenue Agency commitment to improve security measures

I need to work from what the headline implies: Canada's Privacy Commissioner investigated data breaches at the Canada Revenue Agency, and the CRA has committed to improving its security practices as a result. ```json { "summary": "Canada's Privacy Commissioner completed an investigation into data

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

The Guardian — Privacy · May 01, 2026 · International

UK Biobank has my data, but I’m not worried. I know the benefits are too great to consider pulling out | Polly Toynbee

A dataset from UK Biobank — a large longitudinal health research repository — reportedly appeared for sale on Alibaba's platform in China, prompting concern among researchers and a warning from UK Science Minister Patrick Vallance that further such attempts are anticipated. Columnist Polly Toynbee argues the research value of such studies outweighs the risks.

Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance

TechCrunch — Privacy · Apr 24, 2026 · International

Another spyware maker caught distributing fake Android snooping apps

Security researchers have identified a previously unknown spyware vendor whose software was distributed through a fake Android application, apparently used by government authorities to surveil a target. The company had not been publicly linked to surveillance tools before this discovery.

Who should care: Privacy officers · Cybersecurity

The Guardian — Privacy · Apr 23, 2026 · International

Some Interrail travellers told to cancel passports as hacked data posted online

Eurail, the company behind Interrail passes, has disclosed that personal data from a December breach affecting around 300,000 travellers — including passport numbers, names, addresses, phone numbers, and dates of birth — has appeared for sale on the dark web. Some affected customers are now being advised to cancel and replace their passports.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy