China Considers Restricting Overseas Access to Advanced AI Models
China’s Ministry of Commerce is holding talks with Alibaba, ByteDance, and Z.ai about restricting overseas access to the country’s most…
DORA Enforcement: Known Compliance Gaps Are Now Triggering Penalties
Nearly half of regulated financial entities entered DORA’s active enforcement phase with known compliance gaps. The first compulsion payments have…
EU AI Act: High-Risk Deadlines Move
Two high-risk compliance deadlines just moved. The transparency deadline did not. It hits on 2 August. On 29 June, the…
EU-US Data Transfers Tested Again
The legal foundation of EU-US data transfers is under formal challenge for the third time in a decade. On 30…
EDPB Redefines the GDPR Test for Anonymised Data
The EDPB just published guidelines that redefine when data qualifies as anonymous — and the answer now depends on who…
Coordinated GDPR Enforcement Is Reshaping Cross-Border Compliance
A single GDPR violation used to mean one regulator. One fine. One corrective order. That model is over. The EDPB’s…
Coupang Privacy Fines Escalate Into Trade and Political Dispute
A privacy fine just triggered a Congressional trade investigation. Then the President’s stock trades surfaced. South Korea’s PIPC imposed two…
14.2 Million Email Login Credentials. Six Internet Service Providers. One Shared Infrastructure Platform.
Attackers exploited a third-party software vulnerability in KDDI’s shared email platform, potentially exposing login credentials of up to 14.22 million…
Seven Data Protection Authorities. One Declaration. Two Binding Commitments On Children’s Data.
The G7 DPA roundtable — hosted by CNIL in Paris during France’s G7 presidency — adopted two formal documents this…
PII Exposure Emerges as the Leading Cause of AI Agent Rollbacks
31% of production AI agent deployments are being rolled back for a single reason: PII exposure. Not hallucination. Not performance…
South Korea Fines Coupang Fulfillment Services Over Employee Data Processing
₩248 million. A separate fine, against a separate entity — and a fundamentally different set of violations. While South Korea’s…
CNIL Fines IQVIA €5 Million Over Health Data Warehouse Compliance Failures
€5 million. Tens of millions of patient records. And a compliance argument that failed at first contact with a regulator…