data privacy

Ireland's Data Protection Commission has fined Google €403 million for breaches of the EU's General Data Protection Regulation. The penalty, reported by the Irish Times, is one of the largest issued against a major technology company by the watchdog, which oversees many US tech firms' European operations from Dublin. The decision renews debate over enforcement of EU privacy rules against big tech.

Ireland's Data Protection Commission has fined Google €403 million following an inquiry into how the company processes users' location data. The regulator concluded that Google's handling of location information breached EU data protection rules, with concerns centring on how users were informed and asked to consent. It is one of the largest privacy fines issued under the GDPR to date.

A coalition of 44 state attorneys general has reached a settlement over a data breach, according to GovTech. The agreement marks one of the broader multistate actions on cybersecurity and data protection, though details on the company involved, the size of the settlement, and the terms for affected consumers have not been released. Such settlements typically include payments and commitments to strengthen data security practices.

Big Tech is betting its next wave of growth on AI-powered gadgets, particularly smart glasses, but the push is running into privacy concerns. Always-on cameras and microphones raise questions about recording bystanders and collecting constant data. Commentators argue companies must address consent and data protection rules if wearables are to win mainstream acceptance.

The Make America Healthy Again movement is pushing to give Americans far easier access to their personal health data, according to reporting by STAT. The push would let patients obtain and share their medical records more freely, a goal that has drawn attention from both patient advocates and privacy critics as the Trump administration's health agenda advances.

Fintech firm Revolut is testing 'Pay with Smile', a biometric payment method that lets customers pay in shops using facial recognition. The system links customers' existing KYC identity data, runs on Revolut's own point-of-sale hardware, and deducts money directly from a Revolut account, bypassing cards or smartphones. Commentators note this creates a nearly closed payment ecosystem around the company, raising both convenience and privacy questions as the trial draws attention in banking and fintech circles.

The Federal Trade Commission is weighing a proposal on personalized pricing, and reaction is divided. Industry groups are pushing back against potential restrictions, arguing individualized pricing practices can be legitimate, while consumer advocates support greater scrutiny of practices that charge different customers different prices based on their data. The debate touches on privacy, fairness, and how far regulators should go.

A New Mexico jury on Friday found Facebook liable for deceiving users about privacy protections on its platform, delivering another legal setback to the social media company. The Associated Press reported the verdict, which adds to the company's mounting legal troubles over how it handled user data and its privacy claims, and observers are weighing its implications for future privacy litigation against major tech firms.

Financial technology firm Finastra has reached a $3.13 million settlement in a lawsuit over a data breach, agreeing to compensate affected customers. The deal, subject to court approval, resolves claims tied to the company's handling of sensitive customer data. Privacy advocates are citing the case as another example of mounting legal and financial consequences for financial firms that suffer security failures.

A commentary piece argues that the United States may be losing access to critical intelligence data needed to stop future terrorist attacks, raising questions about whether privacy restrictions, policy changes, or intelligence-sharing limits are weakening counterterrorism capabilities. The debate touches on the balance between civil liberties and national security, a recurring tension in US security policy.

California has signed SB 923 into law, extending the CCPA's right to delete personal data so that businesses must also instruct third parties, such as service providers and contractors, to delete shared consumer data. The change aims to close a long-standing gap that allowed consumer deletion requests to stop at the company that received them. Privacy professionals are now assessing how the obligation flows through data-sharing chains.

Walmart says it does not use customers' personal information to set prices, pushing back on privacy concerns as it rolls out digital shelf labels across more of its US stores. The retailer says the electronic tags allow faster price updates and clearer labelling, but the expansion has raised questions about whether dynamic, personalised pricing could follow. Walmart maintains prices will not vary based on individual shopper data.

Some parents are raising concerns about schools requiring students or families to disclose mental health information, according to ABC News. The debate centers on privacy, how the data will be stored and used, and whether such requirements could stigmatize children. Supporters argue early disclosure helps schools provide support, while critics fear overreach and potential consequences for students whose information is shared.

Consumer Reports is examining whether smart home devices, including cameras, speakers and connected appliances, may be collecting and sharing data about their users. The report looks at privacy risks inside connected homes and how much personal information devices gather, raising questions about consent, data sharing with third parties, and what consumers can do to protect themselves.

An opinion piece in the Albuquerque Journal argues that age verification requirements in video gaming raise significant privacy concerns for players. The commentary adds to a wider debate over identity checks required by gaming and online platforms, which critics say collect sensitive personal data and create risks of breaches or misuse.

Privacy advocates are arguing that privacy protections must be built in by default for everyone, including people who believe they have nothing to hide or who are indifferent to surveillance. The argument is that privacy is a fundamental human right, not an optional feature, and that protecting the careless matters as much as protecting the vigilant.

A new battle over financial privacy is emerging, with debate centering on how much access governments and institutions should have to individuals' financial data. The dispute touches on surveillance, consumer rights, and the balance between security and personal freedom in the digital economy. Observers expect the issue to grow as regulators weigh new rules affecting how financial information is collected and shared.

OpenAI has halted AI training after it emerged that government websites were accessed, according to a report from LiveNOW from FOX. The pause raises fresh questions about how the company collects data for training its models and whether official public sites should be used in that process. Details about which governments were involved or how long the pause will last have not been released.

Oura, the Finnish maker of the Oura Ring sleep and health tracker, is moving toward an initial public offering, and the milestone is drawing attention to a bigger question: who should lead and set standards for the handling of sensitive consumer health data. Commentators note that as wearables companies grow into public markets, scrutiny of their privacy practices and governance is likely to intensify.

California has signed SB 923 into law, broadening the right to delete personal data under the CCPA. The move expands consumers' ability to have their information removed by businesses covered by the state's privacy regime. Discussion is focused on what the new obligations will mean for companies handling California residents' data.