Search & browse the archive

War on the Rocks · May 19, 2026 · International

When Refusal Doesn’t Matter: Operation Epic Fury and the Erosion of Host Nation Consent

When the U.S. military launched its war against Iran in Feb. 2026, it did not just dismantle Iranian military capabilities. It shattered the illusion that the United States would consult with its closest allies and that an ally’s refusal to grant base access can stop an American war in motion. Rather than the much discussed “outward flows” of military assets from the Korean Peninsula to the Middle East, it is the anticipated “inward flows” of U.S. military assets that could be more consequential in times of crisis.Focusing on the early days of the fallout of this…

Who should care: General readers · Privacy officers · Policy

Information Commissioner's Office · May 19, 2026 · UK

One month to go: what businesses need to know to meet new data law

One month to go: what businesses need to know to meet new data law Information Commissioner's Office

CNIL · May 19, 2026 · EU / France

Annual report: CNIL's achievements and key actions in 2025

Annual report: CNIL's achievements and key actions in 2025 CNIL

Information Commissioner's Office · May 18, 2026 · UK

Our advice to government on potential changes to online advertising rules

Our advice to government on potential changes to online advertising rules Information Commissioner's Office

Who should care: Lawyers · Compliance

IAPP · May 18, 2026 · International

Privacy for everyone: Why accessibility belongs at the center of modern privacy programs

The IAPP is making the case that privacy programs should be designed with accessibility in mind, arguing that people with disabilities often face distinct and compounded risks when privacy protections are built without them in consideration.

Who should care: General readers · Privacy officers · Policy

IAPP · May 18, 2026 · International

Thought for the week: Is Poland's ABW report a sign of the trajectory of nation-state cyberattacks?

Thought for the week: Is Poland's ABW report a sign of the trajectory of nation-state cyberattacks? IAPP

IAPP · May 15, 2026 · International

Notes from the IAPP Canada: Special report on CRA breaches raises fresh privacy concerns

A special report discussed at IAPP Canada has renewed scrutiny over privacy breaches at the Canada Revenue Agency, drawing attention to how sensitive taxpayer data has been compromised. The report surfaces ongoing concerns about the CRA's ability to protect the personal and financial information it holds on virtually every Canadian adult.

Who should care: General readers · Privacy officers · Policy

IAPP · May 15, 2026 · International

Why is it still so hard to get corporate buy-in for privacy compliance?

The IAPP examines the persistent difficulty privacy professionals face when trying to secure meaningful organizational support for compliance efforts, pointing to structural and cultural barriers that keep privacy work underfunded and deprioritized inside companies.

Who should care: Lawyers · Compliance · General readers · Privacy officers · Policy

IAPP · May 15, 2026 · International

How Canada is approaching the evolving cybersecurity landscape

How Canada is approaching the evolving cybersecurity landscape IAPP

IAPP · May 15, 2026 · International

Brazil reshapes children's data protection under the 'Digital ECA' framework

Brazil has introduced a new legal framework known as the 'Digital ECA,' extending its existing child and adolescent protections into the digital environment. The rules place new obligations on platforms and data processors handling children's personal information.

Who should care: General readers · Privacy officers · Policy

IAPP · May 14, 2026 · International

A view from Brussels: To ban or not to ban

A view from Brussels: To ban or not to ban IAPP

IAPP · May 14, 2026 · International

Notes from the Asia-Pacific region: Malaysia tightens data protection expectations with trio of guides

Malaysia's data protection authority has released three new guidance documents aimed at raising compliance expectations for organizations handling personal data. The guides signal a more structured regulatory posture from Malaysian authorities on data protection obligations.

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · May 14, 2026 · Canada

Letter to the Standing Senate Committee on Rules, Procedures and the Rights of Parliament on its study on the inclusion of provisions relating to e-petitions into the Rules of the Senate

Letter to the Standing Senate Committee on Rules, Procedures and the Rights of Parliament on its study on the inclusion of provisions relating to e-petitions into the Rules of the Senate

Who should care: Lawyers · Compliance

Privacy Commissioner of Canada · May 14, 2026 · Canada

Letter to the Standing Committee on Access to Information, Privacy and Ethics on the Main Estimates for the Office of the Privacy Commissioner of Canada for 2026-2027

The Office of the Privacy Commissioner of Canada submitted a letter to Parliament's ethics and privacy committee outlining its budget request for the 2026-2027 fiscal year. The submission is part of the standard Main Estimates process through which federal oversight bodies request funding from Parliament.

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · May 14, 2026 · Canada

Letter to the Standing Committee on Procedure and House Affairs on the privacy implications of Bill C-25

I need to reason carefully here. The headline and excerpt are identical and minimal — they tell me a letter was sent to a Canadian parliamentary committee about the privacy implications of Bill C-25. Bill C-25 relates to Canadian electoral or parliamentary procedure (the Standing Committee on Proced

Who should care: General readers · Privacy officers · Policy

FTC Consumer Protection · May 13, 2026 · US Federal

Shutterstock to Pay $35 Million to Settle FTC Allegations Over Illegal Subscription and Cancellation Practices

Shutterstock has agreed to pay $35 million to settle FTC allegations that it charged consumers without clear consent and deliberately made subscriptions hard to cancel. The agency found the platform engaged in a range of deceptive billing practices that generated tens of millions of dollars from affected customers.

Who should care: General readers · Privacy officers · Policy

FTC Consumer Protection · May 11, 2026 · US Federal

FTC Chairman Ferguson Advises Companies to Comply with the Take It Down Act

FTC Chairman Andrew Ferguson sent letters to more than a dozen major technology companies, including Amazon, Alphabet, and Apple, reminding them they must comply with the Take It Down Act by May 19. The law requires covered platforms to create a process for victims, including minors, to request removal of nonconsensual intimate images.

Who should care: General readers · Privacy officers · Policy

Data Protection Commission · May 11, 2026 · EU / Ireland

SME ARC Conference – Croke Park May 11th

Ireland's Data Protection Commission is participating in the SME ARC Conference, scheduled for May 11th at Croke Park.

Who should care: General readers · Privacy officers · Policy

Data Protection Commission · May 11, 2026 · EU / Ireland

ARC Conference

I don't have enough information to write an accurate briefing from this input. The headline and excerpt provide only a name ("ARC Conference") and an entity ("Data Protection Commission") with no factual detail about what happened, what was announced, or what was decided. To write a briefing that m

Who should care: General readers · Privacy officers · Policy

LINC CNIL · May 11, 2026 · EU / France

Smart glasses: what was old is new again?

Smart glasses: what was old is new again? LINC CNIL

LINC CNIL · May 11, 2026 · EU / France

[Survey] – How do the French view smart glasses?

[Survey] – How do the French view smart glasses? LINC CNIL

Data Protection Commission · May 09, 2026 · EU / Ireland

Untitled

It looks like the headline and excerpt came through blank — only "Untitled" and a reference to the Data Protection Commission were passed along, with no actual story content. Could you paste the real headline and excerpt? Once you do, I'll write the briefing right away.

Who should care: General readers · Privacy officers · Policy

Data Protection Commission · May 08, 2026 · EU / Ireland

Data Protection Commission Publishes Final Decision Following Inquiry into Permanent TSB

I need to work with limited information here — the excerpt is essentially just the headline repeated with no additional detail. I'll write based on what the headline reasonably implies: Ireland's DPC completed a formal inquiry into Permanent TSB and issued a final decision. ```json { "summary": "

Who should care: General readers · Privacy officers · Policy

Privacy Commissioner of Canada · May 07, 2026 · Canada

Media advisory: Privacy Commissioner of Canada to appear before Parliamentary Committee to discuss 2026-2027 Main Estimates

Canada's Privacy Commissioner is scheduled to appear before a Parliamentary committee to discuss the federal agency's proposed budget for the 2026–2027 fiscal year. The appearance gives legislators a formal opportunity to scrutinize how the office plans to allocate its resources.

Who should care: General readers · Privacy officers · Policy