Security researcher Sam Curry discovered a potential vulnerability within the administrative portal of Subaru's infotainment systems that gave him access to an employee account and allowed him to start and view the location of Subaru's connected cars, Infosecurity Magazine reports.
U.S. District Court for the Northern District of California Judge James Donato did not certify a class-action lawsuit against Meta following claims that the company would have paid for users' personal data in a competitive market, Reuters reports. Donato said analysis presented to support the case did not prove the company lied about its privacy practices.Full story
The Washington Post reports on U.S. Director of National Intelligence nominee Tulsi Gabbard's shifted stance on Section 702 of the Foreign Intelligence Surveillance Act after criticizing the provision for years. She recently argued Section 702 is crucial for intelligence gathering and has improved after some reforms.Full story
The Oregon Department of Justice released a toolkit for people to understand their rights under the Oregon Consumer Privacy Act, which entered into force 1 July 2024. The information includes details on where people can find a business' data collection practices and use of information, and how to file a complaint if a request to delete data is not followed.Full story
Poland plans to bolster its cybersecurity efforts to reduce cyber threats ahead of its May presidential election, Bloomberg reports. Deputy Prime Minister Krzysztof Gawkowski said officials will also work to strengthen "social media analysis and teach government officials about the tools the state has to ensure the integrity of the election."Full story
The IAPP Research and Insights team updated its Global Privacy Law and Data Protection Authority Directory for 2025. Legal Research Associate Aly Apacible-Bernardo, CIPM, and Westin Research Fellow Kayla Bushey detailed the updates, which highlight new and amended comprehensive data protection laws as well as recently established DPAs.Full story
Forty trade associations sent a letter to members of Congress calling on lawmakers to introduce and pass comprehensive federal privacy legislation.
U.K. Information Commissioner's Office Group Manager for AI Policy Sophia Ignatidou discussed growing data protection myths surrounding AI use. Ignatidou said common misconceptions include a perceived lack of user control over personal data being used to train AI, developers' allegedly shielding how they use personal data and how AI models do not carry data protection risks.Full story
To celebrate Data Privacy Week, the U.S. National Institute of Standards and Technology published all of its resources in a new online hub. Additionally, NIST listed several new initiatives, such as its Privacy Threat Modeling Tool and a forthcoming NIST Privacy Workforce Taxonomy.
The Chinese-developed generative AI platform DeepSeek's privacy notice states, "We store the information we collect in secure servers located in the People's Republic of China," Wired reports. Additionally, the company collects user information shared with the platform, information it "automatically collects" and users' personal information obtained from other sources. Meanwhile, DeepSeek's platform endured a cyberattack 27 Jan.