Regulatory, privacy & security news.
Live wire · updated dailyBreaches, lawsuits, enforcement actions and new law — tracked as they happen and decoded for the teams who have to respond. Captain Compliance reads the rulings so you don’t have to, then ships the default changes that keep you covered.
Latest dispatches
RSS feed →DOGE Data Access Raises Privacy Questions as Federal Lawsuit Advances
A federal lawsuit challenging the Department of Government Efficiency’s alleged access to sensitive information held by the Treasury Department and Office of…
Vermont Moves Forward With Age-Appropriate Design Rules for Online Services
Vermont is developing new rules that will determine how online services must protect children’s privacy, estimate users’ ages and avoid product designs…
CDT Report Examines Privacy Risks in Expanding U.S. Government Data Sharing
The Center for Democracy & Technology has released a technical explainer examining how U.S.
NEWS 15 min read
FTC Sues Hims & Hers Over Alleged Health Data Sharing With Meta and Snap
The federal complaint alleges the telehealth company promised consumers a private and discreet healthcare experience while sending health-related customer information and website…
CPPA Board to Weigh Data Broker Fee Adjustments and DROP Compliance Audit Rules
The California Privacy Protection Agency Board will consider changes to data broker registration and access fees along with a package of proposed…
CPSC’s Quiet Push for Identifiable ER Records Raises Fresh Privacy Alarms
A small federal agency best known for recalling faulty appliances and children’s products is now pressing hospitals to hand over detailed, personally…
In Their Privacy Era: What the Swift-Kelce Wedding Still Teaches Us About Control
Taylor Swift and Travis Kelce got married without handing the public a front-row seat.
12 Million Impacted in KDDI Data Breach: Zero-Day in Third-Party Software Exposes Shared Email Platform Across Japanese ISPs
Japanese telecommunications giant KDDI has confirmed a significant data breach that compromised the personal information of more than 12 million users.
The Hidden Privacy Spillover: Why Subsidiary Breaches Trigger Global Compliance Cascades
When news broke that Coca-Cola confirmed a data breach originating from a ransomware attack at its subsidiary, Fairlife, most initial reactions focused…
EDPB Dublin Summit Advances Stronger GDPR Consistency and Cross-Border Enforcement
The European Data Protection Board held a high-level meeting in Dublin this month, focusing on practical steps to improve consistency in GDPR…
U.S. Privacy Law Is Entering Its Enforcement Era
For most of the past decade, the development of U.S. privacy law has been measured by legislation. California enacted the California Consumer…
AI Transcription Tools and Consent Concerns: Why Recording Meetings Without Permission Is Risky
AI-powered transcription tools have become ubiquitous for professionals.