Important
CI Score
CI Score
The San Francisco Police Department expanded drone deployments from about 350 in 2024 to more than 3,500 in the first five months of 2026 in San Francisco, amid continuing policy review.
9/28/2026 • Data Collection & Surveillance Practices • GeneralLarger Topic:Police Drones Test Privacy Boundaries
Florida Representative Greg Steube introduced the FLAFO Act on September 24 in the United States, proposing warrant limits on federal access to networked license-plate-reader data.
9/29/2026 • Data Collection & Surveillance Practices • General
California Governor Gavin Newsom signed SB 923 on September 27, 2026, in California, expanding CCPA deletion rights effective January 1, 2027.
9/28/2026 • Regulation, Law & Enforcement • GeneralLarger Topic:California Turns Data Deletion Into One Request
When a breach affects client information, U.S. law firms should activate a tested response plan, coordinate forensic work through counsel, and assess notice obligations under professional and state rules.
9/28/2026 • Cybersecurity (Privacy-Relevant) • GeneralLarger Topic:Breach Notices Run on Separate Clocks
Angela Lipps sued Fargo and its police department over an allegedly uncorroborated facial recognition match that led to her 2025 arrest and detention in North Dakota.
9/28/2026 • Privacy Technology & AI • GeneralLarger Topic:Police Facial Recognition Triggers Scrutiny
A New Mexico jury found Facebook liable for nearly 44 million consumer-protection violations on Friday in New Mexico over deceptive claims about data practices, with penalties pending.
9/28/2026 • Regulation, Law & Enforcement • GeneralLarger Topic:Facebook Found Liable for Privacy Deception
On September 28, 2026, NetChoice vice president Amy Bos urged a Wyoming legislative committee to reject 27LSO-0140, citing broad privacy duties and litigation exposure for businesses.
9/28/2026 • Regulation, Law & Enforcement • General
Senator Edward Markey and Democratic lawmakers reintroduced a federal biometric surveillance moratorium in Washington in the 2020s, sending the bill to the Senate Judiciary Committee.
9/28/2026 • Regulation, Law & Enforcement • General
In Türkiye, controllers must notify the Personal Data Protection Board within 72 hours of discovering unlawfully obtained personal data under Board Decision No. 2019/10.
9/28/2026 • Regulation, Law & Enforcement • General
In 2018, the US Congress enacted the CLOUD Act, allowing US authorities to compel providers under US jurisdiction to disclose controlled data stored worldwide.
9/28/2026 • Regulation, Law & Enforcement • General
Delaware, California's CPPA, and Texas Attorney General Ken Paxton announced privacy compliance changes and enforcement warnings in August and September 2026 across three states.
9/28/2026 • Regulation, Law & Enforcement • General
Delaware, California, and Texas officials announced privacy-law changes, data-broker enforcement, and tracking-related guidance in their states during August and September 2026.
9/29/2026 • Regulation, Law & Enforcement • General
In its 2026 AI Identity Exposure Report, SOCRadar found corporate AI credentials in infostealer records spanning 36 countries and 482 major enterprises.
9/28/2026 • Cybersecurity (Privacy-Relevant) • General
After AMCA's 2019 data breach, Labcorp agreed to pay Alaska $26,010 and strengthen vendor oversight for information affecting Alaska residents.
9/28/2026 • Regulation, Law & Enforcement • GeneralLarger Topic:Labcorp Settles AMCA Breach Claims
The Future of Privacy Forum scheduled a California workshop for October 21 to examine identity, authorization, accountability, and data access in agentic AI deployment.
9/28/2026 • Privacy Technology & AI • General
Interesting
Lansing residents and DeFlock Lansing organizers protested Flock Safety license plate cameras in Lansing, Michigan, after the City Council voted Aug. 24 to request contract termination.
9/29/2026 • Data Collection & Surveillance Practices • General
Puerto Rico lawmakers filed House Bill 1421 on September 1, 2026, and the ACLU of Puerto Rico supported the measure to prohibit rights-violating mass surveillance systems.
9/29/2026 • Data Collection & Surveillance Practices • General
Spain's Data Protection Agency reported on September 15 an alleged AI-agent personal data breach in Spain as healthcare organizations faced rising AI-enabled security threats.
9/28/2026 • Cybersecurity (Privacy-Relevant) • General
Kiteworks lifted its server-shutdown advisory on September 27 worldwide after patching a critical Advanced Forms vulnerability and finding no evidence of compromised systems.
9/29/2026 • Cybersecurity (Privacy-Relevant) • General
Additional
Equifax had not announced payment dates for two U.S. class-action settlements as of September 28, 2026, while payouts from its 2017 breach settlement were complete.
9/28/2026 • Personal Data & Identity • GeneralLarger Topic:Equifax Duplicate Debt Reporting Settlement
At a Monday summit hosted by the MAHA Institute, Robert F. Kennedy Jr. promoted combining health data for AI analysis, while attendees raised privacy concerns; the summit's physical location was not specified.
9/29/2026 • Personal Data & Identity • General
A home-security guide advises homeowners that smart cameras can affect neighbors' privacy and that account access or company data exposure can compromise information.
9/28/2026 • Data Collection & Surveillance Practices • General
Recently, Jackson Lewis privacy leaders Joe Lazzarotti and Damon Silver advised AI-adopting organizations to limit data exposure and strengthen incident readiness across connected business systems.
9/28/2026 • Corporate Data Practices & Accountability • General
6 additional articles were considered but did not merit inclusion.
