Sep 22, 2026
Multiple telehealth companies offering quick prescriptions for sensitive conditions like weight loss, sexual health, and mental health are repeatedly exposing customers' private medical data due to gaps in U.S. health privacy regulations. The FTC has filed suit against Hims & Hers over data practices and prescribing standards.
A federal judge indicated he would reject portions of TikTok and ByteDance's proposed $400 million settlement with the US Justice Department over privacy allegations. The judge raised concerns about key terms of the agreement reached in August.
Multiple states including Texas and Florida are halting or dismantling Flock Safety's automated license plate reader networks following bipartisan federal legislation threatening funding cuts and revelations from hackers showing the cameras collect more data than previously disclosed.
The Trump administration's Department of Homeland Security has been deploying an obscure legal maneuver to attempt to obtain private information on journalists, non-profit organizations, and labor unions, raising concerns about government overreach and surveillance.
The U.S. Federal Trade Commission announced it is considering requiring businesses to disclose whether they use personalized pricing data to charge different customers different prices. The move comes amid mounting scrutiny from state and federal officials over retailers' use of private consumer data and algorithms to vary pricing.
Federal judges appointed by both parties have unanimously rejected the Justice Department's lawsuits against 30 states and the District of Columbia seeking unredacted voter rolls containing sensitive voter information, as the administration pushes for expanded federal election oversight ahead of the 2026 midterm elections.
Hackers illegally accessed Liechtenstein's Register of Beneficial Economic Owners during the night of July 29-30, 2026, stealing data on approximately 31,000 companies and foundations. The government has established a crisis cell to investigate the breach of the register, which was created in April 2021 to combat money laundering and financial crime.
NHS England has issued an apology and acknowledged that employees from Palantir and other suppliers have access to identifiable patient data, contradicting previous transparency claims that only NHS staff could view such sensitive information. The admission has prompted NHS England to revise how it evaluates the controversial £330 million Palantir platform deal amid staff concerns.
Researchers discovered that xAI's Grok Build CLI was uploading developers' complete code repositories, including commit history and secrets, to a Google Cloud Storage bucket controlled by the company. Following the discovery, Elon Musk's xAI announced it will delete previously uploaded customer data, with researchers confirming the uploads have stopped.
Apple filed a 41-page lawsuit against OpenAI alleging corporate espionage after discovering a bug that allowed a former Apple engineer who joined OpenAI to maintain access to confidential information. OpenAI pushed back against the allegations on Tuesday.
A Bloomberg investigation revealed that state health insurance marketplaces, including those in Virginia and Washington, D.C., shared users' personal information including citizenship and race data with advertisers through embedded ad trackers. Virginia and D.C. paused the data collection and sharing following the report.