Last Update: 08/01/2026 at 1:34 PM EST

Mid-day Briefing: Privacy

Wednesday, July 15, 2026 · 11:48 AM EDT

Key developments

STATESMAN JOURNAL

States settle with bankrupt 23andMe over breach

The Statesman Journal's Anastasia Mason reported that Oregon, 40 other states and the District of Columbia reached a settlement with 23andMe over its 2023 data breach, announced by Oregon Attorney General Dan Rayfield on July 14. Oregon will receive $576,707 from the bankruptcy trustee, and a separate $46.75 million class-action pool will pay impacted consumers. The breach affected 6.9 million customers and exposed account information, location, ancestry reports, DNA matches, family names, profile pictures and birthdates.

Why it matters

The settlement adds state enforcement pressure over genetic-data security at a company already operating through bankruptcy.

Sources & driving stories

STATESMAN JOURNAL · Anastasia Mason

Statesman Journal coverage
YAHOO

Local governments split over license-plate readers

Yahoo reported that Newport eliminated its Flock camera pilot program on July 14, citing constitutional rights, while Kenton County Police is seeking approval to install six automated license plate readers at county-owned property including parks and the county jail parking lot. Commissioners and roughly a dozen public commenters raised privacy, oversight and constitutional concerns. KGET's Connor Dore reported that Bakersfield continues to use hundreds of plate readers, while the Los Angeles Police Department recently canceled its Flock camera contract.

Why it matters

Automated license plate reader deployments are increasingly turning on local governance, retention, sharing and oversight commitments rather than public-safety claims alone.

Sources & driving stories

KGET · Connor Dore

KGET coverage
CBS NEWS SAN FRANCISCO

Grocery Outlet deploys facial recognition in California

CBS News San Francisco reported that Emeryville-based Grocery Outlet has rolled out SAFR facial recognition software at several Bay Area stores, including the Pleasant Hill Bargain Market. Signs tell shoppers the system identifies people suspected of shoplifting and alerts employees when someone on a watchlist enters. Electronic Frontier Foundation attorney Mario Trujillo criticized the system as a dragnet scanning every customer, while SAFR President Charisse Jacques said it is not connected to law enforcement and does not share retailer or shopper data with government agencies including ICE.

Why it matters

Retail facial recognition is moving into routine shopping environments, raising questions about notice, consent, accuracy, watchlist controls and appeal rights.

Sources & driving stories

CBS NEWS SAN FRANCISCO

CBS News San Francisco coverage

Worth noting

WORTH NOTING

Gibraltar adds biometric border processing

Yahoo reported that after the Gibraltar-Spain border fence was removed under a post-Brexit agreement, travelers arriving from outside Schengen will face EU Entry-Exit System checks using photographs and digital fingerprints, alongside live facial-recognition cameras at entry points.

WORTH NOTING

CIPA pixel litigation remains unsettled

Spencer Fane's Evangelina Cantu noted a June 26 federal approval of a $3.85 million Los Angeles Times settlement over website trackers, while pending California appellate cases could decide whether tracking pixels qualify as pen registers under CIPA.

Still unclear

OPEN QUESTION

Will ALPR approvals require enforceable limits?

Newport’s cancellation, Kenton County’s pending proposal and Bakersfield’s continued use all point to retention, audits, outside-agency access and federal sharing as decisive privacy fault lines.

OPEN QUESTION

Can shoppers contest retail face-match decisions?

Grocery Outlet’s rollout depends on retailer watchlists, but the reporting leaves unresolved what notice, human review, appeal and deletion rights customers receive.