The full corpus — beyond today's front page.
116 results · page 1 of 5
The European Data Protection Supervisor released a newsletter digest episode covering data protection and digital policy developments from October, which coincided with European Cybersecurity Month.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
California's privacy agency has proposed amendments to CCPA regulations on opt-out preference signals, explicitly naming the Global Privacy Control as a signal that businesses engaged in selling or sharing personal data are required to honor.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
EPIC submitted comments to the European Data Protection Board urging it to strengthen its draft guidelines on web scraping for AI, arguing the current framework does not go far enough to protect personal data collected from the web.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
A government economy minister has urged small businesses to improve their data protection practices, in a move linked to the UK's Information Commissioner's Office.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
Minnesota Attorney General Keith Ellison secured a $7.1 million settlement from General Motors over the automaker's sharing of drivers' private data. The action follows scrutiny of how GM collected and distributed sensitive driver information without adequate consent.
Who should care: Lawyers · Privacy officers · Compliance
The UK's Information Commissioner's Office has issued a statement on highly effective age assurance, addressing standards or expectations around how online services verify users' ages. The ICO is the UK's data protection regulator and its statements carry significant weight for how platforms must operate.
Who should care: Lawyers · Privacy officers · AI governance
The European Data Protection Supervisor has issued a formal opinion on a European Commission proposal that would create a framework for the EU and the United States to exchange personal data for identity verification, screening, and vetting purposes.
Who should care: Lawyers · Privacy officers · AI governance
The UK's Information Commissioner's Office has taken action against Staffordshire Police after the force wrongly disclosed a victim's home address to their alleged abuser. The incident represents a serious data handling failure within a law enforcement agency.
Who should care: Lawyers · Privacy officers · AI governance
European Data Protection Supervisor Wojciech Wiewiórowski has published a blog post reflecting on the fourth meeting of the AI Act Correspondents Network, focusing on how the AI Act's transparency obligations are being put into practice now that most of them apply.
Who should care: Lawyers · Privacy officers · AI governance · Administrators · General readers · Policy
The European Commission and the European Data Protection Board are jointly seeking input on how competition law and data privacy law should interact where they overlap. The consultation signals growing regulatory interest in treating data as both a market power issue and a rights issue.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
EU member states have approved a change to GDPR that would make personal data processing automatically lawful when it occurs 'in the context of AI,' according to reports. Critics, including privacy advocate Max Schrems, say the provision would let major AI companies use decades of collected personal data with few restrictions.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
New Mexico Attorney General Raúl Torrez issued a public warning to the AI and tech industry following a $25 billion ruling against Meta, calling it a starting point rather than a conclusion. Torrez urged other state attorneys general to pursue similar litigation rather than settle.
Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy
Clearview AI is in a dispute with the UK's Information Commissioner's Office over how the company's facial recognition technology should be classified and regulated. The disagreement centers on whether Clearview's system constitutes monitoring under UK data protection law.
Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy
The European Data Protection Supervisor held a half-day workshop called ARETE in June 2026, focused on how to assess the risk that personal data breaches pose to the individuals whose data is exposed.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
The UK Information Commissioner's Office has closed its public consultation on how privacy rules apply to the use of personal data in research contexts. The consultation period has now ended, meaning responses will be reviewed before any guidance or policy changes are issued.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
The European Data Protection Board has released draft guidelines on anonymization, with particular attention to genomic data and the challenges of treating it as truly anonymous. The guidelines grapple with the relative nature of anonymization, which depends heavily on context and the capabilities of whoever might attempt re-identification.
Who should care: Lawyers · Privacy officers · AI governance
California's SB 923 addresses a known gap in the CCPA's right to delete by extending deletion obligations to third parties that hold consumer data, not just the businesses that collected it originally. The law sets out specific requirements for who must comply and when those obligations take effect.
Who should care: Lawyers · Privacy officers · Compliance
AI systems that generate false information about real people may create legal obligations under GDPR, which requires that personal data be accurate. The piece examines how hallucinated outputs about individuals fit within that framework.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
The Information Commissioner's Office has set out expectations for AI model developers, taking a distinct approach from the European Data Protection Board's guidance on the same topic. The two regulatory bodies appear to differ in how they frame developer responsibilities under data protection law.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy
The Future of Privacy Forum has named the European Data Protection Supervisor (EDPS) the recipient of its 2026 EU Regulator Award, recognizing the institution's contributions to data protection and privacy in Europe.
Who should care: Lawyers · Privacy officers · AI governance · Compliance · General readers · Policy
The UK's Information Commissioner's Office has taken formal action against the Metropolitan Police Service for failures in how it manages information. The nature of the specific failures and the form of the ICO's action are not detailed in the available information.
Who should care: Lawyers · Privacy officers · AI governance
The European Data Protection Board has adopted a formal statement on smart glasses, accompanied by a report examining how the devices affect personal data protection, privacy rights, and surveillance. The move reflects growing concern among EU regulators as smart glasses become more common consumer products.
Who should care: Lawyers · Privacy officers · AI governance · Cybersecurity · General readers · Policy
Washington State's Attorney General has released the office's first dedicated data privacy report, marking a new step in state-level oversight of how personal data is collected and handled.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
Privacy advocacy group noyb reviewed more than 1,000 amendments proposed by Members of the European Parliament on the GDPR and ePrivacy Directive, as part of an effort to track where individual MEPs stand on proposed changes to EU privacy law under the so-called Digital Omnibus package.
Who should care: Lawyers · Privacy officers · AI governance · General readers · Policy