Last Update: 08/01/2026 at 1:34 PM EST

Mid-day Briefing: Privacy

Thursday, July 9, 2026 · 11:50 AM EDT

Key developments

YAHOO

Met plans fixed facial recognition for Soho

The Metropolitan Police plans to expand live facial recognition from a Croydon pilot into London’s West End and Soho by December, targeting deployment before the pre-Christmas period. The Met says the Croydon pilot produced 173 arrests, with one incorrect match among 470,000 faces scanned, but it has not published a full breakdown of the arrests or rollout costs. Critics cited the lack of UK facial-recognition-specific legislation, the scanning of non-suspects, and CCTV retention of up to 31 days.

Why it matters

A fixed LFR rollout in one of London’s busiest public areas would materially expand biometric surveillance in everyday public life.

Sources & driving stories

IAPP

FTC removal ruling clouds data-transfer framework

IAPP’s Lexie White reported that the U.S. Supreme Court’s Trump v. Slaughter ruling allows presidents to remove FTC commissioners without cause, weakening Humphrey’s Executor protections and raising questions about FTC independence. Former FTC privacy official Maneesha Mithal said the agency may become less predictable, while NOYB plans a legal challenge to the EU-U.S. Data Privacy Framework and urged the European Commission to exit it. IAPP’s Peter Swire separately argued the ruling affects the FTC-regulated commercial side of the framework, not the Data Protection Review Court redress mechanism for signals-intelligence access.

Why it matters

The dispute directly affects confidence in EU-U.S. data transfers and whether U.S. oversight remains sufficiently independent for EU adequacy purposes.

Sources & driving stories

IAPP · Lexie White

IAPP coverage

IAPP · Peter Swire

IAPP coverage
THE LEGAL AFFAIR

Bombay High Court orders deepfake takedowns

The Bombay High Court issued an interim order requiring social media platforms to remove deepfake images, AI-generated visuals, superimposed videos, and morphed photographs depicting actor Preity Zinta. Justice Madhav Jamdar found the material prima facie violated Zinta’s moral rights, publicity rights, personality rights, and constitutionally protected privacy rights. The order requires immediate takedown of identified content and reinforces intermediary obligations once notified of unlawful manipulated media.

Why it matters

The ruling adds to Indian privacy and personality-rights jurisprudence around AI-generated impersonation and nonconsensual synthetic media.

Sources & driving stories

Worth noting

WORTH NOTING

Meta Muse raises consent concerns

Morning Brew’s Dave Lozo reported that Meta unveiled Muse, an AI image generator that can manipulate public Instagram users’ photos when tagged unless users enable opt-out controls or make profiles private.

WORTH NOTING

Waymo stop spotlights cabin monitoring

Yahoo’s Jaimie Ding and WRAL reported that San Mateo police detained two teens after a Waymo representative contacted police, remotely pulled the vehicle into a parking lot, and communicated through the car’s internal system; Waymo said facial recognition was not used.

WORTH NOTING

Connecticut privacy amendments are live

Foley & Lardner’s Samuel D. Goldstick reported that Public Act 25-113 amendments to the Connecticut Data Privacy Act took effect July 1, expanding coverage, sensitive-data categories, sale definitions, minors protections, and AI/profiling disclosures, with profiling impact assessments due August 1.

Still unclear

OPEN QUESTION

Will the Met publish evidence before rollout?

The Croydon pilot’s full arrest breakdown and costs remain unpublished, and experts questioned whether performance and proportionality will translate to Soho’s denser nightlife environment.

OPEN QUESTION

Will EU institutions treat Slaughter as material?

The Data Privacy Framework may hinge on whether European regulators and courts distinguish reduced FTC independence from the separate DPRC redress mechanism.