The state of enforcement: Part I — Consumer privacy rights
The state of enforcement: Part I — Consumer privacy rights IAPP
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
The full corpus — beyond today's front page.
15 results
The state of enforcement: Part I — Consumer privacy rights IAPP
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
Brussels, 24 June – The EDPB has launched a dedicated contact form for stakeholders to report possible inconsistencies in how the GDPR is interpreted across Europe. This initiative reflects the commitments set out in the EDPB Helsinki Statement on enhanced clarity, support and engagement, aimed at strengthening the dialogue with stakeholders and ensuring consistent GDPR enforcement across Europe. The new tool enables stakeholders to report alleged divergences between national positions, as well as between national positions and those of the EDPB. The EDPB will not respond to individual submis…
Who should care: Lawyers · Privacy officers · Compliance · AI governance
U.S. Immigration and Customs Enforcement is moving to equip local law enforcement agencies with a facial recognition application to support immigration enforcement operations, according to Biometric Update. The initiative would extend biometric identification capabilities beyond federal agencies to local police departments.
Why this matters: Distributing facial recognition tools to local police for immigration purposes expands surveillance infrastructure into communities, raising Fourth Amendment concerns and increasing the risk of misidentification affecting citizens and non-citizens alike — with limited transparency about use, oversight, or error-rate accountability.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
Canada's Bill C-36 introduces privacy reforms, enforcement changes IAPP
Who should care: Lawyers · Privacy officers · Compliance
Notes from the IAPP Canada: Course correction may be coming for Canada's privacy enforcement model IAPP
Who should care: Lawyers · Privacy officers · Compliance
A man has filed a lawsuit against law enforcement, claiming that an AI-powered facial recognition system produced a faulty match that resulted in his wrongful arrest. The case adds to a growing body of legal challenges targeting the accuracy and use of facial recognition tools by police.
Why this matters: Wrongful arrests driven by algorithmic misidentification illustrate the concrete civil-liberties stakes of deploying error-prone biometric surveillance — particularly for individuals who bear the cost of a technology's failure with little recourse before serious harm occurs.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · AI governance · Policy
Canada's Privacy Commissioner concluded an investigation finding that companies behind the Grok chatbot violated Canadian privacy law in connection with the generation of sexualized deepfakes, marking a significant regulatory enforcement action in the AI-generated content space.
Why this matters: The ruling signals that AI systems producing non-consensual intimate imagery have concrete legal accountability under privacy frameworks — an important protection for individuals whose likenesses can be weaponized without their knowledge or consent.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
A Florida man has filed a lawsuit against police alleging he was wrongfully arrested based on a facial recognition match, adding to a growing body of cases challenging law enforcement's use of the technology in criminal investigations.
Why this matters: The case highlights how facial recognition errors can strip individuals of liberty without reliable evidence, raising serious Fourth Amendment and due process concerns about biometric tools that carry well-documented racial and accuracy disparities.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
A lawsuit has been filed following an arrest in Jacksonville Beach that allegedly stemmed from a flawed facial recognition match, raising questions about law enforcement's reliance on the technology in criminal investigations.
Why this matters: The case illustrates how facial recognition errors can strip individuals of liberty before any wrongdoing is established — a due-process concern amplified by the technology's documented higher error rates against certain demographic groups.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
A Florida man has filed a lawsuit against local police after being arrested based on a facial recognition match that investigators rated at only 93% confidence, raising questions about law enforcement's threshold for acting on algorithmic identification.
Why this matters: The case illustrates how probabilistic biometric tools can deprive individuals of liberty without reliable identification — a due-process concern that critics argue demands stricter evidentiary standards before facial recognition alone can justify an arrest.
Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy
Thought for the week: Spark for the US DOJ Rule enforcement and/or new legislation? IAPP
Who should care: Lawyers · Privacy officers · Compliance
TAKE IT DOWN Act: How to comply as the FTC begins enforcement IAPP
Who should care: Lawyers · Privacy officers · Compliance
The Federal Trade Commission today began enforcing the TAKE IT DOWN Act (TIDA), a law requiring platforms, at the request of victims, to remove intimate photos or videos shared online without victims’ consent. As part of its enforcement role, the FTC has launched TakeItDown.ftc.gov, a website allowing victims and survivors to submit complaints about platforms that have failed to act on valid requests for the removal of nonconsensual intimate images. The website also accepts complaints about platforms that have failed to create a process for people to request removal of these images. “Thanks t…
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
The iPhone and iPad bug allowed law enforcement using forensic tools to read messages that had long been deleted by the Signal app.
Who should care: Lawyers · Privacy officers · Compliance
Exclusive: Internal concerns over allowing US firm linked to ICE and Israeli military to process highly sensitive data The Metropolitan police has held talks with Palantir that could lead to the London force buying the US spy-tech company’s AI technology to automate intelligence analysis for criminal investigations, the Guardian has learned. Palantir, whose software is used by Donald Trump’s ICE immigration enforcement programme and the Israeli military, demonstrated its systems to senior officers in the intelligence division at the UK’s largest police force last month. Intelligence staff hav…
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy