Spirit Airlines' proposed $10 million sale of email, Teams messages and personnel records to Google for AI training faces a bankruptcy hearing Oct. 14, and the fight over it looks…
Italy's Garante fined IQVIA 7 million euros after finding that records from about 1 million family-doctor patients, treated as anonymous, remained identifiable. The decision follows a similar finding by France's…
Who controls your cloud provider is becoming a procurement question. A draft European regulation would put that question to covered public buyers wherever an activity is identified as contributing to…
Meta's promise to detect users under 13 is conditioned on a limited release from the 51 settling attorneys general. The release does not bind the FTC and does not extend…
The government's motion to unwind the 2019 children's privacy decree argues changed ownership and new compliance systems under Rule 60(b). It never mentions the records that decree required, which is…
The EU's e-Evidence Regulation became fully applicable Aug. 18, putting covered providers on 10-day and eight-hour production clocks backed by penalties of up to 2 percent of total worldwide annual…
In seven days, EU authorities gain the power to order data straight from providers in other member states on 10-day and eight-hour clocks. Most member states' implementing law is incomplete,…
The Supreme Court's Trump v. Slaughter ruling ended the FTC's for-cause removal protections and triggered a same-day demand that Brussels withdraw the EU-U.S. Data Privacy Framework, with a potential Schrems…
The World Economic Forum and Bain & Company published a five-dimension trust framework for sovereign AI workloads hosted abroad, giving governments a shared reference for data residency, access rights, encryption,…
Ofcom, the FTC, and the EU AI Act Omnibus have created an emerging three-jurisdiction synthetic-image compliance stack across 12 days — here is what it changes for cybersecurity, information governance,…
