Key Takeaways The UK proposes to block social media platforms for individuals under the age of 16 starting in the spring of 2027. The proposed ban will initiate stronger online boundaries for children, along with tougher controls on contact with strangers. Privacy campaigners assert this ban will create more challenges

Key Takeaways A class action lawsuit against MAC Cosmetics alleges its AI-powered beauty tool collected a consumer’s biometric data without adequate disclosures or written consent. A federal judge denied MAC’s motion to dismiss the suit, allowing the case to proceed due to the plaintiff’s claim. The lawsuit highlights the need

Key Takeaways U.S. cities are increasingly using AI-powered cameras and visual data systems to enhance public safety, traffic management, and other urban concerns. The public and digital privacy advocates have raised concerns about the use of surveillance systems. Experts have emphasized the importance of transparency, data governance policies, and safeguards

Key Takeaways Louisiana became the 22nd U.S. state to enact an extensive consumer data privacy law, Senate Bill 386 (SB), to take effect January 1, 2027. The Louisiana Data Privacy Act (LDPA) provides Louisiana consumers who meet explicit thresholds with specific privacy rights. Businesses that meet the thresholds have the

Key Takeaways OpenAI Codex authentication tokens were stolen through a supply chain attack. The tool used in the attack was a malicious npm package known as codexui-android. Developers were targeted in a malicious supply chain campaign via a seemingly legitimate remote web user interface (UI) version of OpenAI Codex. Package

Key Takeaways Spain’s data protection authority (AEPD) imposed a €18 million fine, which was reduced to €14.4 million after voluntary payout, on Amadeus IT Group for GDPR violations that involve reusing traveler data without the proper legal basis or notice. The enforcement action found breaches of both Articles 14 and

Key Takeaways California officials attained a proposed $12.75 million settlement with General Motors (GM), the largest CCPA fine ever issued. Officials allege that GM sold the names, contact information, geolocation, and driving behavior data to two data brokers without proper notice or approval. This settlement follows the eighth enforcement action

Key Takeaways Connecticut enacted updates to its state privacy law (CTDPA), including a one-stop data deletion mechanism modeled after California’s Delete Act. The law creates a state-run data broker registry, restricts the sale of precise geolocation data, and expands consumer rights. The new rules require transparency for profiling driven by

Key Takeaways An extortion group named ShinyHunters claims to have stolen 8.7 million personal records from Carnival Corporation. The breach likely originated from a phishing attack on a single user account, revealing a potential security gap in access controls and multi-factor authentication. Carnival’s public disclosure that was delayed and extremely

Key Takeaways OpenAI launched a Privacy Filter that identifies and redacts sensitive information before it ever touches the cloud. The Privacy Filter marks a shift in AI companies that are starting to address user privacy concerns by building security measures into the systems from the start. This tool does not

Key Takeaways The Texas Attorney General filed a lawsuit against Netflix for collecting and profiting from users’ data without their knowledge or consent. The petition claims that Netflix gathers large amounts of behavioral data on users and monetizes it by sharing it with advertisers and commercial data brokers. This case,

Key Takeaways Canvas, a popular learning management system, was targeted in a cyberattack by a group called ShinyHunters in late April. The group stole 3.65 TB of data from about 9,000 educational institutions that partner with Canvas and threatened to leak it unless the company paid a ransom. The parent