A breach involving a public figure prompted this press release from Italy’s data protection authority: Regarding the dissemination of personal data on the dark web relating to Vice President Antonio Tajani and his family members, the Italian Data Protection Authority warns media outlets, newspapers, websites, and platforms that the acquisition, dissemination, and republishing, by any...

Zach Weissmueller reports: The war against anonymity is raging in Europe. “The witch hunters work like a mob, and if enough of them phone the police, the police are going to come,” says Bernie Spofforth, a political activist who was detained by U.K. police for a social media post. It’s coming to the United States,...

ABC News reports: NT Health has issued a ban on smart glasses at all of its clinical sites, as part of an internal department review into its privacy policies prompted by a breach at Royal Darwin Hospital earlier this month. The breach involved a medical observer, Dr Neda Mogharehabed, who was visiting Royal Darwin Hospital...

October 26, 2026 In the context of an investigation initiated by Privacy Commissioner of Canada Philippe Dufresne, Loblaw Companies Ltd. has committed to take actions aimed at strengthening its security measures following a cyberattack that impacted approximately two million Canadians. The breach occurred in February 2026 when Loblaw experienced a cybersecurity incident in which a...

October 26, 2026 In the context of an investigation initiated by Privacy Commissioner of Canada Philippe Dufresne, Loblaw Companies Ltd. has committed to take actions aimed at strengthening its security measures following a cyberattack that impacted approximately two million Canadians. The breach occurred in February 2026 when Loblaw experienced a cybersecurity incident in which a...

Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had never approved. The records covered 726 members of...

From the Information Commissioner’s Office: We have reprimanded Staffordshire Police after the force unlawfully disclosed a domestic abuse victim’s home address to their alleged abuser. The incident occurred in March 2024 when Staffordshire Police issued a Domestic Violence Protection Notice (DVPN), an emergency measure intended to protect a victim from violence or threats of violence....

Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had never approved. The records covered 726 members of...

From the Information Commissioner’s Office: We have reprimanded Staffordshire Police after the force unlawfully disclosed a domestic abuse victim’s home address to their alleged abuser. The incident occurred in March 2024 when Staffordshire Police issued a Domestic Violence Protection Notice (DVPN), an emergency measure intended to protect a victim from violence or threats of violence....

Thinking of traveling to Russia? Be aware that the Russian government has expanded a pilot program that tracked foreign migrants in Moscow to track them across the entire country. According to a press release from Interfax: All foreign nationals entering Russia will have to install a mobile app (“Amina”) on their phones to track their...

From Datatilsynet, Norway’s data protection authority: The Norwegian Data Protection Authority has now issued an administrative fine of 92 million Norwegian kroner, equivalent to €8.6 million, which is the highest fine it has issued to date. –  We issued such a high fine in this case because the breaches we identified were very serious. Thousands...

Brian O’Donovan reports: Tech giant Google has been fined €403m by the Data Protection Commission (DPC) over the processing of location data. Under data protection rules, such information must be processed in a lawful, fair and transparent manner. The DPC said that its investigation into Google found failures in this regard meaning that people could...

Source

Dan Cooper, Jadzia Pierce, Kristof Van Quathem, Atli Stannard, Anna Sophia Oberschelp de Meneses, Diego Bonomo, John Bowers, Sam Jungyun Choi, and Laura Schukraft of Covington and Burling write: In recent months, children’s online safety and privacy have moved to the top of the EU’s digital agenda. The European Commission is expected to outline its...

Source

Nicholas Boyle, Claire Kermond, and Alexandra Moore of White & Case write: On August 31, 2026, the Australian Government released a Privacy Reform – Consultation Paper (the Consultation Paper) and an exposure draft of the Privacy Amendment (Personal Data Protection Bill) 2026 (Exposure Draft) detailing proposed changes to the Privacy Act 1988 (Cth) (the Privacy...

Source

Roxanne Libatique reports: A data breach affecting more than one million students, parents, and teachers across Australia and New Zealand has produced one of the clearest test cases the Australian cyber insurance market has seen for how patch-management obligations in policy wordings translate into real claims consequences. Online mathematics platform Mathspace confirmed on September 6,...

Source

DutchNews.nl reports: The Dutch’ healthcare inspectorate has found that the country’s only online abortion service fell short on its duties for care, but will let it keep operating after the site agreed to change its practices. Thuisabortus.nl, which launched in March, was the first service in the Netherlands to let women get the abortion pill prescribed...

Source

From the Autoriteit Persoonsgegevens (AP), the Dutch data protection agency: The streaming platform Twitch announced that Amazon is using Twitch users’ personal data to train AI models. Users who do not want Amazon to use their streams, images and other personal data can now opt out from this feature. The Autoriteit Persoonsgegevens (AP), the Dutch...

Jadzia Pierce and Virginie de France of Covington and Burling write: On August 14, 2026, the French Constitutional Council (the “Constitutional Council”) struck down Article 1 of France’s Act to protect minors from the risks posed by the use of social media (the “Act”), which would have barred minors under the age of fifteen from...

VOCM reports: The province’s Privacy Commissioner is recommending that public bodies consider providing the name of anyone involved in snooping-related privacy breaches to affected individuals. The recommendation comes after an employee of NL Health Services had a peek at a person’s health record. NLHS was notified. The Privacy Commissioner says the health authority took the appropriate steps...