Data Privacy Hub Project Team - Orion Policy Institute

OpenAI’s Privacy Filter Marks Industry Shift

June 4, 2026

Key Takeaways OpenAI launched a Privacy Filter that identifies and redacts sensitive information before it ever touches the cloud. The Privacy Filter marks a shift

Lawsuit Filed Against Netflix Over Data Privacy

May 26, 2026

Key Takeaways The Texas Attorney General filed a lawsuit against Netflix for collecting and profiting from users’ data without their knowledge or consent. The petition

Canvas Data Breach and Ransom Agreement

May 20, 2026

Key Takeaways Canvas, a popular learning management system, was targeted in a cyberattack by a group called ShinyHunters in late April. The group stole 3.65

The Supreme Court Examines the Constitutionality of Geofence Warrants

May 14, 2026

Key Takeaways The Supreme Court heard oral arguments on the constitutionality of geofence warrants, which require companies to turn over information from devices tracked in

TN Medical Center Breach Exposes Sensitive Patient Data

May 12, 2026

Key Takeaways The Cookeville Regional Medical Center experienced a ransomware attack that exposed the personal, financial, and medical information of more than 337,000

SECURE Act Proposes Federal Data Privacy Framework

May 2, 2026

Key Takeaways House Republicans introduced the SECURE Act, which is the first comprehensive federal data privacy framework. This Act would preempt state laws and establish

Oklahoma Establishes Consumer Data Privacy Protections

April 25, 2026

Key Takeaways The Oklahoma Data Privacy Act grants residents new rights to access, correct, delete, and opt out of the sale of their personal data.

Novartis Lawsuit Reveals Gray Area in Patient Data Privacy

April 24, 2026

Key Takeaways A lawsuit filed against Novartis alleges that the company used invisible tracking tools on its websites to collect and pass patients’ sensitive health

Booking.com Data Breach: Travel Information Exposure and Regulatory Gaps

April 23, 2026

Key Takeaways Unauthorized third parties accessed Booking.com customer data, including names, contact details, and reservation information, though financial information was reportedly not compromised. This stolen

Alabama Establishes Comprehensive Consumer Data Privacy Protections

April 21, 2026

Key Takeaways The Alabama Personal Data Protection Act (APDPA) grants residents the right to access, correct, delete, and obtain copies of their personal data. Unlike

OPI-ROCCA: Records Of Critical Cyber Attacks