Politico is reporting that the breach at the Congressional Budget Office is "ongoing." “Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.

Would you like to work on LinkedIn? InfoSec is hiring! We have both manager and IC roles -- and more coming. I'm here because I want to help protect people and not work with jerks. If that's what you like, then I hope you'll join us. Jobs in 🧵

LEAK: I got my hands on the digital omnibus on AI. Some key takeaways: ▶️ Centralized enforcement ▶️ Expanded regulatory privileges ▶️ Grace period for labelling ▶️ No AI literacy obligation on companies Another must-read on @mlexclusive 👇 www.mlex.com/mlex/article...

Does the EU AI Act apply to AI agents? The Commission’s initial views seem to suggest AI agents might not always qualify as an AI system. MEP Lagodinsky asked the Commission to clarify its position and warned about a potential misalignment. www.mlex.com/mlex/article...

The law firm that has represented data broker Kochava in its 3-year legal battle with the FTC over privacy is seeking to withdraw due to "serious and irreparable breakdown in communication." prior: www.mediapost.com/publications...

“In order to protect fundamental rights, maintain legal certainty, and continue to ensure a high level of protection, any reform should be evidence-based, targeted, transparent, and further the EU’s values” (Christopher Kuner in this new FPF guest post) #GDPR #Draghi fpf.org/blog/the-dra...

📢 NEW: EPIC published a new report today that examines how state Attorneys General are advancing privacy enforcement across the U.S. (2020–2024). 220+ cases. 35 letters. 20 investigations. Read more: epic.org/state-ag-pri...

Big #AI regulatory proposal from the UK Government, but not in the way many people think of regulation. This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist… www.gov.uk/government/c...

🔔 Public records-based reporting should be free. @404media.co and @wired.com are leading the way. Hear why this is a public service and good for business, ft. @josephcox.bsky.social, @katie-drummond.bsky.social, Caitlin Vogus, and Lauren Harper. 🗓️ Oct. 29, 2 pm EDT RSVP: freedom.press/unpaywalled

MEPs are preparing to call for EU copyright rules to apply to all generative AI systems placed on the EU market, even if trained abroad. A new compromise backs making respect of EU copyright law a market entry requirement under the AI Act. www.mlex.com/mlex/article...

When people warn about the privacy and security risks of mandating digital age verification, this is exactly what they mean. It’s not hypothetical www.bbc.com/news/article...

The Netherlands weighs in on the EU’s digital simplification agenda. Key message: focus on legal clarity, not deregulation. It also calls for streamlined governance of EU boards and, on the AI Act, urges simplification over delays. www.mlex.com/mlex/article...

Governor Gavin Newsom signed AB 566, requiring all browsers to offer a setting that sends an OOPS signal, letting Californians opt out of third-party data sales as per CPPA. www.gov.ca.gov/2025/10/08/g...

The Commission has launched a tool crafted to help stakeholders determine whether they are subject to legal obligations and understand the steps they need to take to comply. ai-act-service-desk.ec.europa.eu/en

Digital sovereignty is on the agenda of the next European Council summit. Draft conclusions seen by MLex show EU leaders set to reaffirm the bloc’s regulatory autonomy and urge lawmakers to fast-track files related to simplification. www.mlex.com/mlex/article...

Meta and Apple "are in the final stages of agreeing a deal with European regulators to change a range of business practices after being fined a total of €700mn in April for breaching the EU’s landmark Digital Markets Act, according to officials briefed on the discussions."

The decision from DPC on TikTok’s transfers of EEA User Data to China was just published! See linkedin.com/posts/luisalbe….

The Commission has just published a draft guidance and a template for serious incident reporting under the EU AI Act, together with a public consultation open until November 7. digital-strategy.ec.europa.eu/en/consultat...

Shaped by years of public input, California Finalizes Major New Privacy Rules! The CPPA has approved new regs on: - Cybersecurity audits - Risk assessments - ADMT - Insurance - CCPA updates 🗓️ Effective 1/1/26 Final docs coming soon to the CPPA website. Read more: cppa.ca.gov/announcement...

JUST IN: A federal judge in Illinois has thrown out the Trump administration's lawsuit against the state that claims IL's workforce privacy law conflicts with federal immigration enforcement. storage.courtlistener.com/recap/gov.us...

NEWS: Meta will announce an AI reorganization today, dividing the Superintelligence division into four units weighing some cuts or employees moved from AI division considering licensing closed source models to build new AI products w/ @elitan.bsky.social www.nytimes.com/2025/08/19/t...

🎙️PODCAST: Earlier this year, I sat down with @sbolinger.bsky.social to discuss his new documentary, "Privacy People," which tells the story of the rise of the privacy profession. In his exhaustive work, he traveled around the word to interview AND film leaders in the space: iapp.org/news/a/behin...

🎙️PODCAST: Earlier this year, I sat down with @sbolinger.bsky.social to discuss his new documentary, "Privacy People," which tells the story of the rise of the privacy profession. In his exhaustive work, he traveled around the word to interview AND film leaders in the space: iapp.org/news/a/behin...

The Office of the Privacy Commissioner, New Zealand just issued a Biometric Processing Privacy Code that will create specific privacy rules for agencies (businesses and organisations) using biometrics and give New Zealanders confidence about the use of their sensitive personal information.

New: A few weeks ago, when my father-in-law died, the funeral home asked if we wanted to use AI to write his obituary. So I dug into it and found that it's the biggest new trend in "death care." Tens of thousands of AI obits have been made already. Often the families don't even know wapo.st/4okuxIg

BREAKING: The EU Commission has released a mandatory template for AI developers to disclose training data. Unlike the Code of Practice, this is not optional. It could have global fallout, as rights holders abroad might use it to sue over copyright. digital-strategy.ec.europa.eu/en/library/e...

Data protection is a cornerstone of EU values. Today, we've launched the process to renew our adequacy decisions with 🇬🇧. This would ensure personal data can continue to flow safely between the EU and the UK beyond December 2025. More info ↓ europa.eu/!hbrDkn

"The White House is set to use its forthcoming AI Action Plan to take aim at state and federal AI regulations while unleashing land and energy for data centers and cutting back environmental restrictions, three people who were provided details of the plan’s contents told POLITICO Friday."

Beautiful, and thoughtful. For just one example, see this excerpt. I'm increasingly captivated by the idea that "attention is all you need" is both the rallying cry for transformers and an exhortation for us to preserve ours.

Phenomenal article by @meghanor.bsky.social on the ripple effects generative AI is having on creative writing and the mind. As an editor and writer, the issues she so thoughtfully unpacks here really hits home. A highly recommended long read. www.nytimes.com/2025/07/18/o...

DuckDuckGo now lets you hide AI-generated images in search results

For Times insider, where reporters tell the story behind a story, I wrote about how ChatGPT tipped me off to an important phenomenon, by telling the people affected to email me. www.nytimes.com/2025/06/29/t...

General-purpose AI must be safe and transparent. The Code of Practice is now available. It is designed to help industry comply with the AI Act’s rules on general-purpose AI, which will enter into application on 2 August More info ↓ europa.eu/!xFkbjC

Blackburn has now filed an amendment to strike the AI moratorium from the bill altogether.

New from 404 Media: ICE is using a new facial recognition app to identify people, leaked emails show. Point camera at person, reveal their identity. It uses the CBP system that records peoples' faces as they enter or exit the U.S. Now, turned inwards to be used by ICE www.404media.co/ice-is-using...

Today, the Commission adopted a six-month extension of the two adequacy decisions with the United Kingdom, allowing to continue the free flow of data with the UK until 27 December 2025.

🚨BREAKING: Federal judge concludes that using copyrighted works to train generative A.I. is transformative and ultimately a fair use. (Nevertheless, Anthropic can’t beat the lawsuit because it pirated books for another purpose too.) First of kind ruling. www.documentcloud.org/documents/25...

IN: the state ban on AI regulation.

One reason I did the "turn all my decision making over to AI" story last year is that I was curious what's it going to do to us as we turn more of our day-to-day thinking over to gen AI chatbots. This study is small but doesn't bode well: time.com/7295195/ai-c...

"What does a human slowly going insane look like to a corporation?... It looks like an additional monthly user." The latest from @kashhill.bsky.social, on patterns of magical thinking among some chatbot users, is essential reading. www.nytimes.com/2025/06/13/t...

another great essay from @cobun A view from DC: Pride, coded language and the tragic irony of a private life

It’s taken a few years but recent experience involving the proposed deployment of #AI tools across all imaginable functions is turning data protection impact assessments (DPIAs) into one of the success stories of the #GDPR. Let me elaborate. Mini-🧵

Senate Commerce's version of the budget bill out tonight requires states to not enforce their AI rules for 10 years under the moratorium to receive federal broadband subsidies under BEAD www.commerce.senate.gov/services/fil...

CPPA is hiring a Chief Privacy Auditor with deep expertise in privacy & tech to build the Agency's Audits Division. Play a role in ensuring meaningful privacy protection for millions of Californians. Apply by 6/13: calcareers.ca.gov/CalHrPublic/...

The House’s 10-year ban on state AI regulation would wreak havoc on our country. The language is so broad that it could upend everything from state privacy law to contract law. It could even break the internet. I will do everything in my power to stop it. www.techpolicy.press/the-big-beau...

🛑 We have sent a letter to Meta Ireland / Facebook Norway today, demanding them to stop their planned roll-out of training their AI models on users' (and non-users data), arguing they are in breach of the GDPR, consumer law and the digital markets act. PR: www.forbrukerradet.no/siste-nytt/f...

Just in: A federal judge rules against Trump’s attempted purge of the Privacy and Civil Liberties Oversight Board, saying the firings of Travis LeBlanc and Ed Felten were illegal. The court voids the firings and orders the members be reinstated. 70 PAGES: storage.courtlistener.com/recap/gov.us...

The challenges of AI are too urgent for Congress to preempt state law, argue CAIDP’s Marc Rotenberg, Merve Hickok, and Christabel Randolph. States are already leading, they say; will federal lawmakers support them, or obstruct their progress?