Charmian Aw, Ciara O’Leary, and Florence Seow of Hogan Lovells Cadwalader write: Singapore’s Personal Data Protection Commission (“PDPC”) has issued its final Advisory Guidelines on Use of Personal Data in Generative AI (“Guidelines”), marking a significant development in Singapore’s AI governance framework. The Guidelines provide long-awaited clarity on how the Personal Data Protection Act 2012...

Joke Bodewits and Julian B. Flamant of Hogan Lovells Cadwalader write: On 13 July 2026, the Dutch Data Protection Authority (“AP”) published a practical self-assessment tool (“Tool”) and corresponding guidance document (“Guidance”) on generative AI systems. The Guidance outlines the AP’s expectations under the General Data Protection Regulation (“GDPR”) across the generative AI lifecycle, while...

Suzanne Smalley reports: The United Kingdom’s Supreme Court ruled Monday that Bahrain can’t hide behind state immunity to block a lawsuit filed by two dissidents alleging the government infected their devices with spyware. Saeed Shehabi and Moosa Mohammed allege Bahrain secretly installed FinSpy spyware on their laptops, likely in 2011. Government agents then spied on...

Matthew Dalton reports: A man kidnapped a 16-year-old girl at knifepoint in 1998 from the streets of La Rochelle, a port city in western France. He drove her to a wooded area and raped her, leaving her traumatized but alive. Over the next decade, four other girls and young women were sexually assaulted in similar settings...

Robert Booth reports: The UK information commissioner who resigned over sexual harassment and bullying claims is understood to be taking legal action against a woman who flagged his conduct. The science and technology secretary, Liz Kendall, said she was “appalled” by the fact that John Edwards was preparing to serve legal papers on one of the...

Jessica Murray reports: Facial recognition technology in shops will soon alert police in real time to the presence of serious offenders, with civil liberties groups warning of a “dangerous escalation” towards surveillance and criminalisation in the retail sector. Facewatch, a facial recognition system used by more than 100 businesses including Sainsbury’s, B&M and Spar to...

Suzanne Smalley reports: The European Parliament has voted to bring back a rule giving big tech permission to scan users’ messages to hunt for child sexual abuse material (CSAM), a process that critics call Chat Control. Thursday’s vote occurred the day before summer recess and was the product of an unusual legislative procedure requiring an...

The use of AI technologies has added to the risk of harm and privacy violations. The use of AI has also helped people file complaints with the data protection regulator. We may need a “It’s a blessing… and a curse” file for AI stories. Brian O’Donovan reports: The Data Protection Commission (DPC) has described as...

Hunton Andrews Kurth notes: As of June 19, 2026, organizations subject to UK data protection law are required to implement a mechanism or procedure whereby individuals can make complaints relating to their personal data. The new requirements were introduced by the Data (Use and Access) Act 2025. Individuals must first raise their complaint with the...

Paige Collings and Jillian C. York write: This week, politicians in the UK pushed forward with plans to eviscerate privacy and free speech on the internet by announcing a ban on social media for users under 16 that is set to take effect in Spring 2027. The UK government continues to falsely characterize this policy as a necessary response...

Russell Myers reports: A hospital worker at the private clinic where the Princess of Wales had abdominal surgery is set to face a criminal prosecution following an investigation into claims that the Princess’ medical records had allegedly been accessed by staff in 2024, it is understood. A total of three trusted employees, who worked at The...

Canadian privacy law professor Michael Geist writes: The government is set to introduce its long-promised privacy reform legislation early this week, with the recognition of a fundamental right to privacy expected to serve as a foundational element of the bill. Establishing privacy as a fundamental right would be a welcome and long-overdue development, one that many have...

Daryna Antoniuk reports: Russia has spent decades building one of the world’s most sophisticated digital surveillance systems. Now, the Kremlin is taking steps to make it faster, more automated and better integrated across the country’s internet infrastructure. Known as SORM, the platform gives Russia’s security and intelligence agencies access to telephone calls, internet traffic and...

Dutch News reports: Around two-thirds of Dutch parents use an app or device to track where their children are, according to a survey by broadcaster RTL Nieuws – a habit that child development experts warn can give a false sense of security. In the survey of RTL’s viewer panel, 65% of parents with children aged...

Zack Whittaker reports: The Dutch government has blocked American IT giant Kyndryl from acquiring Solvinity, a Dutch cloud provider that hosts the Netherlands’ online identity platform. The government in The Hague said the deal poses a possible “risk to the public interest.” Dutch minister for the digital economy Willemijn Aerdts said in a machine-translated letter published Monday...

Amaar Chowdhury reports: London’s Metropolitan Police – the UK’s largest police force – asked tech companies to give officers access to private communications data over 700,000 times in 2025 alone, according to figures obtained by The Register under the Freedom of Information Act. These statistics expose the monitoring of everyday platforms like takeaway delivery services, and also...

There seem to be more news stories about data protection out of Kenya recently. This one appeared on CapitalFM: The Office of the Data Protection Commissioner (ODPC) has found St Luke’s Orthopaedic and Trauma Hospital liable for unlawfully disclosing a patient’s sensitive medical information and ordered it to pay Sh525,000 in compensation. In a ruling...

The Standard reports: A medical intern at Princess Margaret Hospital has been suspended after allegedly posting photos containing patients’ information on a personal social media account, the Hospital Authority (HA) announced. The incident came to light after a complaint was filed on Friday, prompting the hospital to launch an immediate investigation. A spokesperson for the...

Odia Kagan of FoxRothschild writes: The Italian Data Protection Authority (Garante) recently fined online classifieds platform Bakeca S.r.l. after an unknown user published two ads, including an explicit offer for sex work, listing the phone number of a person who had nothing to do with the ads and never consented to their publication. The decision,...