AI-enabled mental health tools are moving quickly from novelty to mainstream use, and regulators are starting to draw sharper lines around what those tools can and cannot claim to do. Recent lawsuits against Character Technologies Inc., the company behind Character.ai,
Latest from Data Privacy + Cybersecurity Insider - Page 3
AI Meeting Tools Face Wiretapping Wake-Up Call
A new California federal lawsuit against AI notetaking provider Granola highlights a growing privacy risk for companies using meeting transcription tools: consent cannot be an afterthought. According to the complaint, Granola’s software allegedly recorded a virtual meeting participant without giving
Cyber-Attack Downs More Than 30 Water Utilities Simultaneously
Over 30 individual Minnesota water and wastewater treatment facilities were simultaneously hit with a cyber-attack from an unknown source on July 26 and 27, 2026. The coordinated attack targeted the utilities’ operational technology systems and caused some affected communities to
Sony TV Privacy Suit Ends, But Connected TV Data Risks Remain
Sony smart TV owners have voluntarily dropped their proposed class action against Samba TV, an analytics company accused of collecting and selling television-viewing information to third-party advertisers in violation of state and federal privacy laws. DellaSalla v. Samba TV, Inc.,
Pennsylvania’s New Telemarketing Law Dials In on Texts and Robocalls
On July 20, 2026, Pennsylvania Governor Josh Shapiro signed SB 992, updating and expanding Pennsylvania’s Telemarketer Registration Act of 1996 and strengthening restrictions on unwanted telemarketing communications. The law reflects that telemarketing is no longer limited to live calls
White House Moves Toward Voluntary AI Model Review Framework
The White House is moving closer to a voluntary framework under which AI companies would submit their most advanced models to the federal government before public release. The White House’s Office of the National Cyber Director reportedly circulated the draft
Privacy Tip #501 – Fitness Trackers Lack Transparency, Privacy + Security Features
A recent Electronic Frontier Foundation (EFF) article reports that companies that make wearable trackers, whether for fitness or health, “are behind the times when it comes to basic privacy practices and transparency” and urges those companies to “improve those practices.”
AI Agents A Top 2026 Cybersecurity Threat
Cybersecurity firm Forrester recently issued its annual report, Top Cybersecurity Threats in 2026, which outlines “the most critical risks organizations need to plan for.”
The report predicts the top threats that organizations will face in 2026 based on recent trends
CMMC Phase 2: A Pause, Not a Pass
On September 10, 2025, the U.S. Department of Defense (DoD) issued the CMMC Procurement Rule, which made cybersecurity compliance a condition of doing business with that agency by requiring contractors and subcontractors to meet specified security standards before accessing Federal
California Privacy Regulator Puts Delivery and Transportation Apps Under the Microscope
California’s privacy regulator has launched its first-ever audit, signaling a new phase of active oversight under the California Consumer Privacy Act (CCPA) and its amendments. The California Privacy Protection Agency (CPPA) is focusing on delivery and transportation apps in the