Latest from the Privacy Desk
All dispatches →
AI The OpenAI Agents Didn’t Need Superpowers. They Used Other People’s Loose Ends
Most of the commentary on July’s OpenAI and Hugging Face incident has focused on the agents: how a group of AI models…
AI An AI-Written Résumé Gave Investigators a Lead on a Bank Hacker. What South Korea’s Attacks Say About Amateur Attackers
The most unsettling detail in the investigation into this autumn’s attacks on South Korean financial firms is not the size of the…
AI Provenance Isn’t Enough for AI Agents. They Need Accountability Records
For the past few years, “provenance” in AI policy has mostly meant one thing: proving where a piece of content came from.
AI After the AI Omnibus: Where the EU AI Act and GDPR Now Meet, Article by Article
The EU AI Act was never meant to replace the GDPR, and the July 2026 amendments make that explicit in the text.
AI When the Attacker Is an Agent: What AI-Orchestrated Intrusions Mean for Security, Privacy and the Board
For most of the last decade, the speed limit on a cyberattack was the attacker’s own staff.
AI Most Companies’ AI Risk Comes From Tools They Bought. A Practical Plan to Manage It
Most of the public debate about AI regulation is about the companies that build frontier models.
AI Ottawa Bets CAD 1.6 Billion on Cohere. Sovereign AI Still Comes Down to Your Contract
Canada has decided that where its AI runs, and who controls the data flowing through it, is a question of national policy.
AI Canada’s Privacy Regulators Wrote the Health AI Audit Checklist Before the Law Exists
Canada’s privacy regulators have put the health sector on notice that artificial intelligence will be judged by the same privacy rules as…
AI AI Can Now Write Proofs That Code Won’t Crash. Here’s What “Formally Verified” Does and Doesn’t Promise
The same AI systems that have become good at finding software flaws are now being pointed at a harder job: proving that…
AI SB 53 and the TDTA: California’s Two AI Transparency Laws Ask Very Different Questions
California now has two AI transparency laws on the books that are often mentioned in the same breath and almost never apply…
AI When an AI Company Goes Bust, Who Gets the Conversations? Bankruptcy Law and Chatbot Data
When a company goes bankrupt, its assets are sold to pay its creditors.
AI Quantum Was the Deadline. Now Regulators Are Asking Whether AI Gets to Encryption First
For a decade, the threat to encryption had a name and a rough date: a large quantum computer, probably in the 2030s.