data privacy

Ireland's Data Protection Commission has fined Google €403 million for breaching the EU's General Data Protection Regulation, according to the Irish Times. The penalty from Google's lead European regulator ranks among the larger GDPR fines issued to a major technology company, and the ruling is likely to fuel ongoing debate about how EU watchdogs police the data practices of large US platforms.

Privacy advocates are renewing calls for privacy protections to be enabled by default for everyone, arguing they should apply even to people who believe they have nothing to hide or who are indifferent to surveillance. The argument frames privacy as a fundamental human right rather than an optional setting, insisting that opting out should be unnecessary because safeguards must protect all users regardless of their personal stance on data collection.

A new research paper analyses how web and mobile conversational AI agents handle user data, examining the tracking and privacy practices embedded in popular chatbots and voice assistants. The study, 'Prompt Like a Butterfly, Sting Like a Tracker', is drawing attention on developer forums, where readers are discussing how much personal information these AI services collect and share with third parties.

Consumer advocates are arguing that Australian consumer group CHOICE should test cars not just for performance but for connectivity — what data vehicles capture, where it is sent, and to whom. The discussion cites findings that all connected cars tested contacted their manufacturer's servers, raising questions about how much driving and personal data automakers collect and share.

The US Department of Health and Human Services Office for Civil Rights has issued clarifications on how federal privacy rules apply to state Medicaid programs. The guidance addresses how patient information may be handled and shared under Medicaid, aiming to help states comply with HIPAA requirements. States and health advocates are expected to examine the clarification for implications on data sharing and beneficiary privacy protections.

Commentary is highlighting the 'blockchain trilemma' — the difficulty of achieving scalability, security and decentralisation at the same time — as the main obstacle to mainstream blockchain adoption. The piece also cites persistent lack of transaction privacy and fragmented interoperability between networks, leading to congestion, high fees, exposed financial data and 'walled garden' isolation between chains, with zero-knowledge technology floated as a possible answer.

Flock Safety, a company that supplies automated license plate reader technology to police departments, faced tough questions at a public meeting in Charlotte, North Carolina. Residents and officials pressed the company on how its cameras track vehicles, who can access the data and what safeguards exist. The scrutiny comes as US cities debate the privacy trade-offs of expanding surveillance networks.

The Healthcare Innovation Summit is hosting a session on the genetic challenges and opportunities in digital medicine. The discussion, presented by the HCI Innovation Group, looks at how genetic data can be integrated into digital health tools and what obstacles stand in the way, from privacy and ethics to clinical implementation. Attendees are weighing how genomic advances could shape the next generation of personalised care.

The law firm Edelson has opened an investigation into a data breach at Bee, Bergvall & Co., according to a press release issued via GlobeNewswire. Edelson, known for data privacy and class action litigation, is gathering information from affected individuals as a possible first step toward legal claims. Details on the breach's scale, affected data, and the company's response have not yet been disclosed.

President Trump has launched America.gov, an AI-powered platform intended to centralize US government services for citizens. The system promises faster access to federal programs through artificial intelligence assistance. The announcement is drawing attention alongside debate about how AI will handle sensitive government interactions, questions about data privacy, and whether automated systems can reliably replace traditional service channels.

Australia's peak electric vehicle body has argued that the ongoing controversy over connected-car data collection is unfairly singling out electric vehicles, when data-gathering practices are common across the modern car industry. The intervention comes amid public debate about what connected vehicles track and who can access that information, with EVs facing outsized scrutiny.

Estonia's Supreme Court has ruled to limit the publication of data on expunged criminal records, according to ERR News. The decision means details of convictions that have been erased can no longer be freely disclosed, strengthening privacy protections for people whose records have been cleared. The ruling is drawing attention to how far public access to criminal history information should go.

A developer maintains a small open-source calculator that estimates the cost of closing an unexplained gender pay gap. The tool is built in JavaScript and is designed to make zero network calls, so salary data entered by employers or analysts never leaves the user's browser. The privacy-first approach is drawing attention in open-source and HR communities.

OpenAI has issued an apology to Australia following a data breach involving an Australian government portal. The incident has raised questions about data security in government-linked digital services and how third-party technology providers handle sensitive information. Further details about the scale of the breach and any affected data have not been confirmed in available reports.

A Spanish-language technology blog post is circulating about checking your browser's fingerprint, the unique trail of data that websites can use to identify and track users. The piece invites readers to test how identifiable their own browser is and reflects on privacy and online security, resonating with ongoing concerns about web tracking.

Spanish tech blogger The Cheis has published a new post exploring how much identifying information a web browser reveals about its user, covering browser fingerprinting, tracking and privacy protection. The piece walks readers through checking their own browser's fingerprint, a topic of growing interest as advertisers and data brokers rely on fingerprinting techniques that are harder to block than traditional cookies.

A new guide details how Windows 11 users can manage location privacy through Settings under Privacy & Security. It explains how to control whether the PC can determine its location at all and which individual apps are allowed access to that data. The walkthrough covers all available options, reflecting ongoing user concern about how operating systems and applications handle sensitive location information on personal computers.

A comparison of three major password managers argues that NordPass, Bitwarden and Proton Pass each reflect a different philosophy: commercial convenience, open-source transparency, and privacy-first design. The piece claims there is no universal best choice, only a clear winner depending on each user's needs, weighing security, pricing and trust in 2026.

Guidance is circulating on whether Windows 11 users should enable Basic diagnostic data, with a detailed breakdown arguing it is the right choice. The setting sends Microsoft limited information needed to keep the system secure and up to date, while reducing the amount of data collected about how people use the operating system. Privacy-conscious users are weighing the trade-off between tighter privacy protection and the telemetry Microsoft says it needs for security fixes and updates.

The EU's Digital Omnibus package may establish an official definition of what counts as scientific research, a question with major implications for data use, AI development and privacy rules. Policy analysts at Tech Policy Press highlight the debate, as the wording could determine which activities qualify for research exemptions under EU digital law. Researchers and technology firms are watching closely, since the definition would shape how companies and institutions access and process data across the bloc.

A growing warning says the most invasive device people own may be the car parked in their driveway. Modern vehicles collect large amounts of personal data, including location history, driving behavior, and even in-cabin activity, often sharing it with insurers, data brokers, and manufacturers. Privacy advocates argue cars track more than phones, and drivers are urging others to check what data their vehicles gather and how to limit it.

Robert F. Kennedy Jr, the US Health and Human Services Secretary, set out plans for broad collection of Americans' health data during an event tied to the Make America Healthy Again movement. He described a wide-ranging data-gathering agenda as central to the administration's health agenda, drawing attention and criticism over privacy implications.