On July 20, 2026, Pennsylvania Governor Josh Shapiro signed SB 992, updating and expanding Pennsylvania’s Telemarketer Registration Act of 1996 and strengthening restrictions on unwanted telemarketing communications. The law reflects that telemarketing is no longer limited to live calls
Latest from Data Privacy + Cybersecurity Insider - Page 3
White House Moves Toward Voluntary AI Model Review Framework
The White House is moving closer to a voluntary framework under which AI companies would submit their most advanced models to the federal government before public release. The White House’s Office of the National Cyber Director reportedly circulated the draft
Privacy Tip #501 – Fitness Trackers Lack Transparency, Privacy + Security Features
A recent Electronic Frontier Foundation (EFF) article reports that companies that make wearable trackers, whether for fitness or health, “are behind the times when it comes to basic privacy practices and transparency” and urges those companies to “improve those practices.”
AI Agents A Top 2026 Cybersecurity Threat
Cybersecurity firm Forrester recently issued its annual report, Top Cybersecurity Threats in 2026, which outlines “the most critical risks organizations need to plan for.”
The report predicts the top threats that organizations will face in 2026 based on recent trends
CMMC Phase 2: A Pause, Not a Pass
On September 10, 2025, the U.S. Department of Defense (DoD) issued the CMMC Procurement Rule, which made cybersecurity compliance a condition of doing business with that agency by requiring contractors and subcontractors to meet specified security standards before accessing Federal
California Privacy Regulator Puts Delivery and Transportation Apps Under the Microscope
California’s privacy regulator has launched its first-ever audit, signaling a new phase of active oversight under the California Consumer Privacy Act (CCPA) and its amendments. The California Privacy Protection Agency (CPPA) is focusing on delivery and transportation apps in the
New DROP Requirements Raise the Stakes for Data Brokers Handling Californians’ Personal Information
California’s SB 361 expands California’s Delete Act and will soon require registered data brokers to regularly check California’s data deletion database, known as DROP, to determine whether a California consumer has requested deletion of their personal information. Beginning August 1,
Frontier Model Evaluations Show They “Cheat”
A new study by the AI Security Institute (AISI), Cheating Behaviour in Frontier Model Evaluation, found “cheating behaviour in all of our capability evaluations,” and outlines “the implications as models grow more capable.”
AISI defined “cheating” as “taking an
AI In the Dugout: MLB’s AI Crackdown Shows Why Guardrails Matter
Major League Baseball’s (MLB) move to restrict dugout iPad functionality is a reminder that AI governance is showing up everywhere, including in the middle of professional baseball games. According to reports, MLB disabled custom tablet tabs after concerns that teams
Privacy Tip #500 – Wow—500 Privacy Tips! Here’s a Recap
It’s hard to believe that today’s post marks the publication of our 500th Privacy Tip. What a milestone!
We started publishing Tips because readers kept asking me about ways to protect themselves from scams, how to keep up with the