Regulatory, privacy & security news.
Live wire · updated dailyBreaches, lawsuits, enforcement actions and new law — tracked as they happen and decoded for the teams who have to respond. Captain Compliance reads the rulings so you don’t have to, then ships the default changes that keep you covered.
Latest dispatches
RSS feed →Washington AG Says State Is ‘Behind Where We Should Be’ on Comprehensive Privacy Law
Washington Attorney General Nick Brown says one of the country’s largest technology hubs still has significant work to do on consumer privacy,…
Croatia Fines Gambling Operator €2.59 Million Over Biometric Data and Invalid Consent
Croatia’s data protection authority has imposed a €2.59 million GDPR fine on a gambling operator after finding that the company collected excessive…
AI Agents Are Becoming Privileged Users — and That Changes Cybersecurity, Privacy and Liability
For years, companies have treated artificial intelligence primarily as a software capability.
EY Data Breach Exposes Goldman Sachs and Man Group Clients — and a Larger Third-Party Privacy Problem
A cyberattack affecting EY has exposed sensitive personal and financial information belonging to clients of some of the world’s best-known financial firms,…
IAPP Will Certify Lawyers on AI, and the Board Is Already Staffed With Firm and Client Counsel
The International Association of Privacy Professionals said on October 8 that it is building an AI Specialist certification for people who work…
Newsom Vetoes the Sensitive-Data Sale Ban and Keeps the Limit-My-Use Button
Governor Gavin Newsom vetoed Assembly Bill 1542 on September 27, the same weekend he signed the bill that expands California’s right to…
Ofcom: One in Twelve Online UK Adults Already Uses AI on a Phone or Broadband Account
Ofcom published a review on September 25 of how people and small businesses are using artificial intelligence to manage phone, broadband, and…
Meta Is Selling Muse on an Opt-Out. The Default Still Trains the Model
Meta is pitching Muse, its new agent, as the assistant that lets the user decide what the company sees.
Newsom Signs SB 923: California’s Delete Right Now Covers Data the Business Bought, Not Only Data the Consumer Typed In
Governor Gavin Newsom signed the Expanding Privacy Rights Act on September 27.
Italy Fines IQVIA €7 Million Over Health Data: Why “Anonymous” Data Can Still Be Personal Data
Italy’s data protection authority has imposed a €7 million fine on IQVIA Solutions Italy after finding that a large health-data analytics database…
NEWS 6 min read
PacSun Privacy Lawsuit by Bursor & Fisher
An audit went out to the privacy consultant for PacSun and it was ignored.
Pentagon Personnel Database Was Open for Nine Months. Nearly 3 Million Records Were Exposed
A U.S. defense official confirmed that unauthorized users reached a Defense Manpower Data Center system between October 2025 and July 2026. The…