Data Privacy Hub Project Team - Orion Policy Institute

UK Proposes Social Media Ban for Children Under 16

July 31, 2026

Key Takeaways The UK proposes to block social media platforms for individuals under the age of 16 starting in the spring of 2027. The proposed

MAC Lawsuit Raises Privacy Concerns Over AI Beauty Tools

July 29, 2026

Key Takeaways A class action lawsuit against MAC Cosmetics alleges its AI-powered beauty tool collected a consumer’s biometric data without adequate disclosures or written consent.

Cities Expand Use of AI-Powered Visual Data Systems Amid Growing Privacy Concerns

July 27, 2026

Key Takeaways U.S. cities are increasingly using AI-powered cameras and visual data systems to enhance public safety, traffic management, and other urban concerns. The public

Louisiana Implements Comprehensive Consumer Privacy Law

July 24, 2026

Key Takeaways Louisiana became the 22nd U.S. state to enact an extensive consumer data privacy law, Senate Bill 386 (SB), to take effect January 1,

OpenAI Codex Authentication Tokens Stolen in Supply Chain Attack

July 1, 2026

Key Takeaways OpenAI Codex authentication tokens were stolen through a supply chain attack. The tool used in the attack was a malicious npm package known

Record of €18M Fine for Amadeus Over GDPR Violations Involving Traveler Data

June 25, 2026

Key Takeaways Spain’s data protection authority (AEPD) imposed a €18 million fine, which was reduced to €14.4 million after voluntary payout, on Amadeus IT Group

California Reached a $12.75 Million CCPA Settlement with General Motors (GM)

June 18, 2026

Key Takeaways California officials attained a proposed $12.75 million settlement with General Motors (GM), the largest CCPA fine ever issued. Officials allege that GM sold

Connecticut Data Privacy Updates and the New Delete-Style Framework

June 10, 2026

Key Takeaways Connecticut enacted updates to its state privacy law (CTDPA), including a one-stop data deletion mechanism modeled after California’s Delete Act. The law creates

Carnival Corporation Data Breach Exposes Millions of Passenger Records

June 8, 2026

Key Takeaways An extortion group named ShinyHunters claims to have stolen 8.7 million personal records from Carnival Corporation. The breach likely originated from a phishing

OpenAI’s Privacy Filter Marks Industry Shift

June 4, 2026

Key Takeaways OpenAI launched a Privacy Filter that identifies and redacts sensitive information before it ever touches the cloud. The Privacy Filter marks a shift

OPI-ROCCA: Records Of Critical Cyber Attacks