Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Key developments
Meta pauses monitoring after access-control failures
Meta paused its Model Compatibility Initiative, an employee monitoring program launched in April to collect workplace data for AI training, after reports that unauthorized employees accessed restricted data on June 18. CSO Online’s Evan Schuman reported that collected data included mouse movements, click locations, keystrokes, screen content, full prompts, transcriptions, private conversations and performance data, and that the initial access-control fix reportedly did not fully hold.
Why it matters
The episode shows how AI-training data collection can turn workplace monitoring into a high-risk privacy and security control problem.
Sources & driving stories
CSO ONLINE · Evan Schuman
CSO Online coverageJudge blocks SAVE citizenship checks for voters
U.S. District Judge Sparkle L. Sooknanan ruled that the expanded Systematic Alien Verification for Entitlements tool can no longer be used for voter citizenship checks, siding with the League of Women Voters, the Electronic Privacy Information Center and citizen plaintiffs. ABC Columbia reported that the judge found agencies had “haphazardly combined and repurposed” sensitive information from millions of Americans, including citizenship data they knew was unreliable; at least 25 states had used the system to scan roughly 67 million registrations.
Why it matters
The ruling directly limits federal-state reuse of centralized personal data where privacy defects could translate into voter disenfranchisement.
Sources & driving stories
ABC COLUMBIA
ABC Columbia coverageVermont enacts genetic and health privacy laws
Vermont enacted H.639 and S.71, adding new protections for direct-to-consumer genetic testing data, consumer health data, biometric data and neural data. Inside Privacy reported that H.639 takes effect July 1, 2026 and adds consent, deletion, service-provider destruction and government-disclosure limits, while S.71 takes effect January 1, 2028 and restricts consumer health data use, geofenced tracking near health facilities and sales without consent.
Why it matters
Vermont is expanding state privacy law into genetic, health, biometric and neural data categories that are increasingly treated as sensitive outside HIPAA.
Sources & driving stories
INSIDE PRIVACY
Inside Privacy coverageWorth noting
WORTH NOTING
Capital One tracking class denied
A Northern District of California judge denied class certification in a website tracking privacy case, finding individualized issues around data transmission, consent, privacy-policy exposure, standing and harm.
WORTH NOTING
Breach notices keep clustering
KH Credit Union disclosed exposure of SSNs, financial account data and PHI via Kettering Health systems, while Texas reports said a licensing vendor breach may affect up to three million hunting and fishing license holders.
WORTH NOTING
FortiBleed access catalog exposed
Security Affairs reported that researcher Volodymyr Diachenko found an exposed server listing valid remote-access credentials for 73,932 Fortinet firewalls across 21,632 organizations in 194 countries.
Still unclear
OPEN QUESTION
Can AI workplace monitoring be bounded?
Meta’s pause raises the unresolved question of whether companies can collect rich behavioral and internal-work data for AI training while preserving employee consent, purpose limits and access controls.
OPEN QUESTION
How reliable are repurposed identity databases?
The SAVE ruling turns on whether government systems built for one purpose can be safely reused for voter-roll enforcement when the underlying citizenship data may be incomplete or wrong.