10 – Breaking News & Latest Updates 2026
Skip to main content

Privacy

As gadgets and services get smarter, they need more data, and face the hard problem of keeping it safe. Data privacy has become a huge problem for Google, Facebook, Amazon, and any company using artificial intelligence to power its services — and a major sticking point for lawmakers looking to regulate. Here’s all the news on data privacy and how it’s changing tech.

Wes Davis
Wes Davis
Google pays an Australian woman after failing to remove defamatory ‘Ripoff Report’ results — twice.

ABC News in Australia reported that Dr. Janice Duffy settled with Google after winning two lawsuits alleging defamation — one in 2015 and one earlier this year.

The judge found Google liable for publishing snippets from the site Ripoff Reports, which profits by allowing people to post unvetted “complaints” about others on the site and surfacing them in Google Search. As the judge in Duffy’s last lawsuit noted, would change URLs to keep pages visible.

A 2021 New York Times report about the site noted that Google began downranking Ripoff Reports and similar sites.

Richard Lawler
Richard Lawler
Is it too late to protect our privacy?

Kashmir Hill, author of the book Your Face Belongs to Us and “not a privacy nihilist,” spoke to Nilay on Decoder about whether or not we can do anything about the rise of a facial recognition-enabled dystopian world.

Clearview AI and the end of privacy, with author Kashmir Hill

New York Times journalist Kashmir Hill comes on Decoder to discuss her new book, Your Face Belongs to Us, and what the spread of facial recognition technology means for the future of privacy.

Nilay Patel
Richard Lawler
Richard Lawler
In Germany, Google has to add new options about how it will process user data.

In certain situations, like using Gmail, Google News, Assistant, Contacts, or Google TV, personal data will be combined across different services it offers or with data from non-Google sources.

This is the arrangement set up by Germany’s Federal Cartel Office, or Bundeskartellamt, after an antitrust inquiry under a provision allowing it to intervene “when competition is threatened by large digital companies.”

In the future Google will have to provide its users with the possibility to give free, specific, informed and unambiguous consent to the processing of their data across services. For this purpose Google has to offer corresponding choice options for the combination of data. The selection dialogues must be designed so as not to guide users manipulatively towards cross-service data processing (avoiding “dark patterns”).

Where data are not actually processed across services and Google’s data processing terms explicitly make this clear, Google will not have to offer choice options. Any obligations under the General Data Protection Regulation remain unaffected by these obligations.

The regulator mentions it’s still conducting more proceedings against Google (Alphabet), Amazon, Apple, Facebook (Meta), and Microsoft.

Monica Chin
Monica Chin
Facial recognition is banned in New York schools.

New York State Education Department Commissioner Betty A. Rosa has issued an order prohibiting New York State schools from purchasing or using facial recognition technology. Schools may use other forms of biometric identification, the department says, but are asked to consider “the technology’s privacy implications, impact on civil rights, effectiveness, and parental input”.

In a report on the subject earlier this summer, the state’s Office of IT Services noted that “there are discernable risks to the use of this technology in school settings”.

Wes Davis
Wes Davis
The biggest known MOVEit hack leaked the personal information of up to 11 million people.

Maximus, a company that administers government programs like Medicaid and Medicare, was swept up in the broad MOVEit hacking campaign in May that affected over 2,000 organizations.

Victims filed a proposed class action lawsuit against the company after the attack, which as TechCrunch noted saw the leak of social security and other sensitive health information for between 8 and 11 million people.

Wes Davis
Wes Davis
Over 50,000 students’ data was stolen in a recent MOVEit breach.

National Student Clearinghouse (NSC), a Virginia-based educational nonprofit, said in a sample data breach notice filed with the California Attorney General that it suffered a MOVEit-related cyber attack on May 30th, reported Bleeping Computer.

The NSC says in the letter that stolen data may include SSNs and other personal and school-related records. Bleeping Computer writes that 890 schools’ were affected. The organization acknowledges the breach and subsequent patch on its website.

Richard Lawler
Richard Lawler
The stans have discovered facial recognition.

This report by 404 Media discusses an unnamed Taylor Swift fan TikTok account with 90,000 followers that finds people in viral videos and releases their information, like name, occupation, and social media profiles. It does this using PimEyes, one of several facial recognition search engines. And at least so far, TikTok has declined to remove it.

One target told me he felt violated after the TikTok account using facial recognition tech targeted him. Another said they initially felt flattered before “that promptly gave way to worry.” All of the victims I spoke to echoed one general point—this behavior showed them just how exposed we all potentially are simply by existing in public.

Jay Peters
Jay Peters
Not a great look for Musk.

A new Justice Department filing says that Elon Musk’s actions at X (formerly Twitter) might have violated a privacy order from the FTC, according to The Washington Post.

Seems like Musk may have made some bad decisions:

Multiple employees testified that Musk gave directives that were at odds with the company’s normal processes and policies, according to the filing.

Richard Lawler
Richard Lawler
TLO is the latest doxing slang for you to worry about.

404 Media, a new outlet formed by members of Vice’s former tech vertical Motherboard, follows up a previous report on criminals using TransUnion’s TLOxp tool to sell info (SSN, previous address, everything) on virtually any target via Telegram.

Now, as they report, while the fraudsters’ access to TLOxp may have ended, its name has become the “Xerox” of doxing, even as criminals use other similar tools to sell detailed reports on people for $15 - $20,

Emma Roth
Emma Roth
A leaked document offers a glimpse at negotiations between TikTok and the US government.

In a draft agreement obtained by Forbes, TikTok reportedly offered the government a number of concessions to avoid a ban in the US.

That included the ability for the DOJ and DOD to examine TikTok’s US servers, prevent changes to its privacy policies, and even “veto the hiring” of anyone on its data security team. It’s not clear if any of these purported agreements are still on the table, however, as Forbes says the document was drafted in the summer of 2022.

Richard Lawler
Richard Lawler
What if your mobile apps weren’t spying on you and exposing your data?

Meet Veilid (pronounced Vay-Lid), an open-source, peer-to-peer application framework launched at Def Con this week.

Described as “conceptually similar to IPFS and Tor,” the team behind it says it will bring the better parts of those with more performance and security for messaging, file-sharing, or social network apps that don’t harvest user data.

As proof of concept, the team has posted source code for VeilidChat, a Signal-like messaging app. There’s more coverage from the Washington Post, Engadget, and The Register.

Richard Lawler
Richard Lawler
The FCC is taking public comments on its plan for a cybersecurity version of the Energy Star sticker.

If you have questions about the proposed US Cyber Trust Mark that’s supposed to help customers answer questions about security and privacy; this 30-day comment period is a good time to speak up.

Details are in the Notice of Proposed Rulemaking (PDF) here. FCC commissioners are taking input on questions like who will run the program, what kinds of devices it applies to, and what security standards should be involved.

Proposed U.S. Cyber Trust Mark logo
Proposed U.S. Cyber Trust Mark logo
Image: FCC
Wes Davis
Wes Davis
Detroit police falsely arrested an eight-month-pregnant Black woman based on a bad facial recognition match.

Porcha Woodruff is suing the city of Detroit and a Detroit detective after she was arrested for a carjacking while she was eight months pregnant. She’d been identified by facial recognition software matching her to a video of the crime. From the complaint:

On February 16, 2023, at 7:50 a.m., Ms. Woodruff was preparing her children for school when she was confronted by six Detroit police officers at her doorstep. They presented her with an arrest warrant for robbery and carjacking, leaving her baffled and assuming it was a joke, given her visibly pregnant state. However, the officers made it clear they were serious and proceeded to arrest her.

Racial bias in facial recognition hasn’t been solved. Woodruff’s false arrest based on facial recognition isn’t a first for Detroit, which has done this twice before.

Wes Davis
Wes Davis
California’s privacy regulator will investigate what car companies do with the data they collect.

The California Privacy Protection Agency (CPPA) is gearing up to make automakers’ data collection its first target since the agency’s inception in 2020.

CPPA executive director Ashkan Soltani said in the regulator’s release that modern, connected vehicles can gather a “wealth of information” about people in or near them, and the agency wants to know what they’re doing with that data:

“Our Enforcement Division is making inquiries into the connected vehicle space to understand how these companies are complying with California law when they collect and use consumers’ data,” Soltani said.