Regulatory, privacy & security news.
Live wire · updated dailyBreaches, lawsuits, enforcement actions and new law — tracked as they happen and decoded for the teams who have to respond. Captain Compliance reads the rulings so you don’t have to, then ships the default changes that keep you covered.
Latest dispatches
RSS feed →State Privacy Regulators Intensify Scrutiny of Data Brokers and Sensitive Data
State privacy enforcement is moving beyond general consumer rights and into the business models, technical systems and contractual relationships that determine how…
Toyota Faces CIPA Class Action Over Alleged Website Tracking Without Consent
First Honda was fined by CalPrivacy last year and now we have the plaintiffs firms coming after another Japanese automaker in California.
How to Use AI Responsibly in Digital Advertising: NAI’s Latest Do’s & Don’ts Guidance
The Network Advertising Initiative (NAI) has released timely new guidance titled Key Do’s & Don’ts for Using AI in Network Advertising.
OpenAI’s AI Agent Escaped Its Sandbox and Hacked Hugging Face. That Is an AI Governance Failure.
An OpenAI cybersecurity agent was given a difficult assignment: complete an advanced hacking evaluation.
Delaware HB 380: Expanding the DPDPA – Key Changes, Controversy, and Compliance Implications
Delaware is poised to significantly strengthen its comprehensive privacy law.
The State of U.S. Privacy Enforcement For Data Brokers and Sensitive Data
U.S. state privacy regulators are ramping up enforcement with a clear focus on data brokers, sensitive personal information, and transparency obligations. From…
CalPrivacy Launches First Audit: Gig Economy Delivery & Ride-Share Apps Under Scrutiny
California’s privacy regulator is officially in enforcement mode.
ICE Shared Improper Medicaid Data with Palantir: Major Privacy and Compliance Risks Exposed
In a significant escalation of data-sharing controversies under the Trump administration, new court filings reveal that Immigration and Customs Enforcement (ICE) improperly…
NEWS 7 min read
Opt-In or Get Out: Why Meta’s Default AI Features Are Eroding Trust and Demanding Stronger Rules
In the rush to stuff every corner of our digital lives with artificial intelligence, Meta keeps making the same frustrating choice: turn…
The Human Weak Link: How Wind Tre’s €1.7 Million Fine Exposes the Telecom Sector’s Persistent Security Blind Spots
Italy’s data protection watchdog didn’t mince words when it hit Wind Tre with a €1,715,600 fine recently.
Anthropic’s EU Hearing Exposes a New AI Risk: Foreign Governments Can Control Your Model Access
European lawmakers questioned Anthropic before the European Parliament on July 14, 2026, but the most important issue raised during the hearing was…
Dutch Privacy Regulator Issues New GDPR Playbook for Generative AI
The Dutch Data Protection Authority has released two new resources intended to help organizations develop, purchase, implement, and use generative artificial intelligence…