Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Key developments
Coupang fined record $410 million in South Korea
South Korea's Personal Information Protection Commission imposed a record 624.7 billion won, or about $410 million, fine on ecommerce company Coupang. The regulator tied 423.5 billion won to data-protection violations linked to a breach affecting 37.6 million people and 201.1 billion won to other unauthorized data collection practices. PIPC said a former Chinese software developer retained an authentication key after leaving and used it for about a year to access user data including names, phone numbers, and residential building entry codes; Coupang said no financial or government ID data was compromised and plans to appeal.
Why it matters
The fine is a major enforcement escalation for breach response, access controls, and unauthorized data collection in a large consumer platform.
Sources & driving stories
PLATFORM ECONOMY INSIGHTS
Platform Economy Insights coverageATF cancels warrantless phone-tracking contract
Wyoming Truth's Byron Tau reported that the Bureau of Alcohol, Tobacco, Firearms and Explosives canceled its contract for Webloc, a Penlink tool using commercial ad-tech location data to track mobile devices without warrants. ATF ended the pilot after concerns from Rep. Michael Cloud, Sen. Ron Wyden, a prosecutor, and a judge; Wyden and Cloud said ATF conducted more than 300 warrantless searches, including more than 200 tied to active cases. The report notes other agencies, including the FBI and Department of Homeland Security, continue buying commercial geolocation data.
Why it matters
The cancellation marks a concrete retreat from warrantless commercial location-data use while the broader federal market for such data remains active.
Sources & driving stories
WYOMING TRUTH · Byron Tau
Wyoming Truth coverageKIDS Act package could expand online age checks
Techdirt reported that Congress is preparing to vote within the next week on the KIDS Act, a package combining a revised Kids Online Safety Act with additional internet bills, study requirements, reporting obligations, and new regulations. The article says the revised KOSA removes the prior duty-of-care provision but uses a "knows or should have known" standard for users under 17, creating pressure for platforms to collect age data or deploy age-estimation tools. It also flags rules affecting direct messages, ephemeral messages, AI chat services, and encrypted communications.
Why it matters
Even without an explicit age-verification mandate, the bill could push platforms toward broader identity, age, and biometric checks for users of all ages.
Sources & driving stories
TECHDIRT
Techdirt coverageWorth noting
WORTH NOTING
NYC school AI surveillance challenged
Davis Vanguard reported that the NAACP Legal Defense and Educational Fund submitted testimony ahead of a June 26 City Council hearing urging officials to reject AI-powered school surveillance, facial recognition, predictive policing tools, and new School Safety Agent hiring.
WORTH NOTING
Hilton Head adding AI cameras
Island Packet's Li Khan reported that Hilton Head Island plans to begin installing AI-enabled cameras at Coligny Beach Park and nearby areas in early July, with encrypted video transmission, roughly 14-day local storage, object-detection alerts, and facial recognition under exploration.
WORTH NOTING
Challenge Manufacturing reports ransomware breach
BeyondMachines reported that Michigan-based Challenge Manufacturing disclosed a Chaos ransomware-related breach to the Texas Attorney General on June 26, with the group claiming 270 gigabytes of stolen data and at least 1,661 Texas residents affected.
Still unclear
OPEN QUESTION
Will courts require warrants for commercial location data?
ATF's Webloc retreat leaves unresolved whether agencies can keep buying ad-tech geolocation records that would require a warrant if obtained directly from cell carriers.
OPEN QUESTION
Can age-safety bills avoid universal verification?
The KIDS Act's liability standards may force platforms to identify minors in practice even if the text says age verification is not required.