The full corpus — beyond today's front page.
268 results · page 1 of 12
ICE has awarded a surveillance contract to Thomson Reuters, a deal that had already drawn scrutiny and opposition before it was finalized. The contract positions Thomson Reuters as a key data vendor supporting federal immigration enforcement operations.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
TikTok has dropped two appeals against the UK Information Commissioner's Office and agreed to pay a £12.7 million fine related to a children's privacy enforcement action. The company is no longer contesting the ICO's findings in those proceedings.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
The UK government is establishing a National Centre for Information Defence to detect and counter foreign disinformation and AI-generated deepfakes, particularly from hostile states such as Russia. The centre will bring together intelligence agencies, law enforcement, and social media companies.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
Beyond the fine: What the TikTok case reveals About LGPD enforcement IAPP
Who should care: Lawyers · Privacy officers · Compliance
A European regulator has fined Google €403 million over violations related to how the company handled user location data. The penalty reflects ongoing enforcement action against the tech giant's data collection practices under European privacy law.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
Ireland's Data Protection Commission has fined Google 403 million euros, closing an inquiry that began in 2020 into how the company handled users' location data. The case is one of several large enforcement actions brought against major tech companies under the EU's GDPR framework.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
The European Commission has proposed the EU Kids Act, a draft law designed to protect minors online by imposing age-based access rules and safety requirements on social media, video games, and AI systems. Critics argue the legislation will force widespread age verification, creating privacy costs that fall on all users, not just children.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
Spanish credit and business information firm Axesor has paid a reduced fine of €128,000 to resolve a data privacy enforcement action brought by Spain's data protection authority.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A joint law enforcement advisory reports that North Korean hacking group WaterPlum compromised at least 30,000 devices globally between December 2025 and July 2026, siphoning more than $10.7 million in cryptocurrency that was transferred back to North Korea.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A wrongful arrest linked to AI facial recognition has led to a $10 million lawsuit, according to reporting by the Korea Daily. The case centers on apparent misidentification by automated facial recognition technology used in a law enforcement context.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · AI governance · Policy
The Department of the Interior plans to deploy facial recognition AI to support investigations into missing and murdered persons as well as human trafficking cases. The announcement signals a federal expansion of biometric tools into sensitive law enforcement contexts.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
A Tennessee woman has filed a lawsuit against North Dakota police after faulty facial recognition software allegedly led to her wrongful arrest. The case adds to a growing record of misidentifications tied to law enforcement use of the technology.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
A multinational law enforcement advisory from the FBI, Pentagon, and agencies in Japan, Australia, and Germany warns that a threat group called 'WaterPlum' has compromised thousands of devices across roughly 100 countries. The actors, linked to North Korea, are targeting job seekers by impersonating AI and blockchain companies to steal cryptocurrency.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
The IAPP has published a regional briefing covering developments in artificial intelligence regulation, privacy law, and cybersecurity enforcement across Greater China and Hong Kong.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
Authorities have seized the domain of Radaris.com, a people-search data broker, over alleged violations of Daniel's Law, a New Jersey statute that protects the home addresses and personal information of law enforcement officers, judges, and prosecutors from public disclosure.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A New Jersey court ordered the transfer of radaris.com and more than a dozen related domains after the data broker repeatedly failed to comply with a lawsuit alleging it violated a state law protecting the personal information of law enforcement officials.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
A Tennessee woman has filed a $10 million lawsuit against the city of Fargo after she was wrongfully arrested based on a mistaken facial recognition match. The case adds to a growing record of flawed identifications tied to automated recognition systems used by law enforcement.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
A breach of Florida's driver database was carried out using login credentials belonging to the Plant City police department, exposing a law enforcement access point as the vulnerability. The incident has revived calls for stronger data privacy protections around government-held personal information.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
U.S. Attorney General Blanche has publicly opposed the use of prosecutorial action as a tool for regulating artificial intelligence, signaling a position against agencies or officials using enforcement cases to effectively set AI policy.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
An investigation found that police officers are routinely entering meaningless or joke entries — like 'idk' or 'LMAO' — into the required justification fields when querying automated license plate reader networks that can pull data from tens of thousands of cameras at once. The findings suggest that audit logging requirements, meant to provide accountability for mass surveillance tools, are being ignored in practice.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
A social media trend using distorted or AI-generated images of the Cat in the Hat character has spread across the US, with some posts used to make threats against schools and students. Several teenagers have been arrested or charged in connection with the posts, prompting warnings from schools and law enforcement.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
Two employees of Lamesa Independent School District in Texas were arrested following a law enforcement investigation into alleged computer security breaches. The Lamesa Police Department, working with the Texas Rangers, made the arrests after the district issued a public statement about the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Amazon introduced a new encryption feature for Ring cameras called Throw Away the Key Encryption, which shifts some control over video access toward users. Critics argue the approach still leaves Amazon holding temporary encryption keys, stopping well short of true end-to-end privacy protection.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy