Digital privacy, surveillance, data protection, civil liberties
RSS feed for this categoryFlock Safety has announced it will end a pilot program for its "Distress Detection" feature, which used acoustic gunshot detection devices to listen for sounds of human distress. This move comes after EFF raised concerns about the feature's civil liberties implications, potential for misuse by law enforcement, and legality under state eavesdropping laws.
The Electronic Frontier Foundation (EFF) is highlighting how the video game 'Watch Dogs 2' accurately depicted and predicted real-world digital rights issues, including surveillance technology and discriminatory AI. The article announces an upcoming panel at San Diego Comic-Con where EFF representatives and game creators will discuss these parallels.
ICE officers involved in a shooting incident in Maine were equipped with body cameras, but these devices were not activated at the time. Sources indicate the cameras cannot be turned on, and the Trump administration stated no footage exists from the event.
Daniel Solove argues that individual control over personal data is insufficient for regulating privacy in the AI era. He proposes holding companies accountable through measures like data minimization, fiduciary duties, and liability for harmful technological design and algorithms.
Genetic testing company 23andMe will pay $18 million to settle claims from 43 attorneys general. The settlement addresses allegations that the company failed to adequately protect customers' genetic data. This case highlights the importance of robust data security measures for companies handling sensitive personal information.
The Electronic Frontier Foundation (EFF) and ARTICLE 19 have submitted joint comments to the European Commission regarding draft guidelines for the Digital Services Act's (DSA) trusted flagger mechanism. Their submission aims to strengthen safeguards for freedom of expression, due process, and the impartiality of the system, advocating for caution in cross-border assessments and clarifying that platforms remain responsible for determining content legality.
California's legislature has scaled back a proposed expansion of its age-gating law, specifically removing provisions that would have significantly impacted internet browsers and websites. The amended bill, A.B. 1856, also exempts open-source operating systems, addressing concerns about privacy and security threats previously raised by organizations like the EFF.
Many popular wearable health devices, such as smartwatches and fitness bands, lack basic transparency reports and robust privacy features. Companies creating these devices collect extensive user data, which can be shared with third parties for marketing, insurance purposes, or AI model training. This collected health data is increasingly being accessed by law enforcement through subpoenas and warrants for investigations.
Democrats questioned Jay Clayton, President Trump's nominee for Director of National Intelligence, during his confirmation hearing regarding whether Trump ordered the subpoena of New York Times journalists. Clayton's responses were evasive, raising concerns about his ability to resist political retribution.
The article discusses the renewed effort in Washington to "age gate" the internet, citing the recently passed KIDS Act by the House of Representatives. The EFF argues that while proponents claim the act is for minor protection, it encourages more surveillance instead of prioritizing privacy.
Researchers have developed a new 'Fourier pixel' that can function as both a display and a camera simultaneously, potentially enabling screens to capture images and sound. This technological advancement brings closer the surveillance capabilities described in George Orwell's '1984', where telescreens could both transmit and receive information.
The General Court of the European Union has ruled against Apple, upholding its obligations under the Digital Markets Act (DMA) regarding interoperability. This decision ensures greater choice for developers and users in Europe by allowing applications from outside Apple's ecosystem and potentially facilitating research into Apple's operating systems.
New York has enacted legislation mandating surveillance and censorship features on 3D printers, despite concerns about privacy and free expression. While some provisions were softened, the law still criminalizes access to certain firearm print files, albeit as a misdemeanor rather than a felony.
A Welsh administrator of the Doxbin website, Callum Dare, has been jailed for encouraging "swatting" incidents. He motivated others to conduct these dangerous hoaxes and created short videos from the footage of the incidents.
Bruce Schneier has announced a list of his upcoming speaking engagements at various cybersecurity and privacy-focused events. These include the Policy-Relevant Privacy Research Workshop, Boston Leadership Exchange, Cognitive Security Conference, and DEF CON 34. The events are scheduled for July and August 2026 in different locations.
A study by KU Leuven researchers examined 85 popular crypto wallet browser extensions and discovered they leak enough information to link and track users across different addresses and websites. This leakage allows for identifying and following individuals as they interact with various sites and blockchain servers.
EPIC has submitted testimony to the D.C. Council, advocating for stronger provisions in the proposed DC Government Data Privacy and Protection Act of 2026. The organization aims to enhance data privacy and protection measures within the D.C. government.
Sony's decision to discontinue physical game discs for PlayStation consoles in January 2028 is criticized for eroding digital ownership rights and pushing consumers towards a renter model. This move impacts data accessibility, especially for those with limited internet access, and undermines the "right of first sale" which allows for sharing, reselling, and modifying purchased media.
Meta has filed a patent for an AI system designed to continuously listen to a user's voice throughout the day. This AI would analyze vocal patterns to determine the user's emotional state and log these findings with timestamped data, including location and activity.
Anomaly 6, a company that claims its phone-tracking technology can pinpoint U.S. intelligence officials, has been hired to investigate the mysterious "Havana Syndrome." The company previously boasted about its ability to track individuals, raising questions about its involvement in a sensitive government investigation.
The new Executive Director of EFF reflects on the pivotal moment for digital rights, highlighting recent Supreme Court victories in privacy and expressing concern over expanded executive power and potential internet access restrictions. The article emphasizes the critical need for EFF's work to counter growing government and corporate surveillance capabilities.
The European Parliament has failed to block a proposal to extend mass scanning of private communications without a warrant. Despite opposition, the motion to reject did not achieve the necessary majority, allowing the "Chat Control 1.0" law to be extended through 2028. This measure allows service providers to scan private messages on various platforms, raising concerns about privacy and potential impacts on businesses.
Governments worldwide are increasingly implementing social media bans and age restrictions for online platforms, but tech companies are finding it challenging to comply with these new regulations. The effectiveness of these measures is also being questioned as compliance falls short of expectations.
Automated content moderation systems, particularly those using AI, continue to struggle with accuracy, especially in less-resourced languages and for specific communities like Palestinians and LGBTQ+ individuals. These systems often misclassify content, leading to wrongful deletions or failures to detect harmful material, highlighting the need for improved transparency, cultural competence, and accessible appeals processes.
AI-powered surveillance systems are poised to monitor all public actions and significant private activities, flagging infractions in real-time. These systems will not only record violations but also link them to official government records and alert authorities, potentially even the public.
A study of 281 free Android VPN apps revealed significant security and privacy flaws, including traffic leaks and unencrypted data. These problematic apps have collectively been installed over 2.4 billion times, indicating a widespread risk to users seeking online privacy.
The article discusses how surveillance technologies, such as automated license plate readers (ALPRs) and location tracking tools, are being used to investigate individuals seeking abortion care in Texas. Mayday Health, a nonprofit focused on reproductive health information, launched a campaign with billboards in Houston to inform Texans about these surveillance threats and their rights.
The House of Representatives has passed the KIDS Act, a package of legislation aimed at controlling minors' online activities, which includes provisions for age verification on websites and apps. The Electronic Frontier Foundation (EFF) opposes the bill, arguing that its age-gating mechanisms will compromise user privacy and free expression without accurately protecting children.
The Massachusetts Senate has passed the "Protecting Children from Addictive Social Feeds Act," which aims to protect children from harmful platform features on social media. EPIC, an advocacy group, applauds this legislation for regulating social media platform design to prevent invasive data collection and manipulative practices.
The European Commission has decided not to extend the Digital Markets Act's (DMA) interoperability mandate to social networking platforms, a move criticized by the EFF. This decision, announced in its first review of the DMA, is seen as a missed opportunity to enhance user choice, improve privacy practices, and foster competition by allowing users to switch platforms more easily. The EFF argues that Big Tech platforms benefit from this delay, maintaining their 'walled gardens' and hindering user freedom.
The EU's controversial 'Chat Control' legislation, aimed at scanning private messages for child sexual abuse material (CSAM), is poised to move forward after a parliamentary vote failed to reach the necessary threshold to kill the interim rule. Despite opposition from civil liberties advocates, the legislation's proponents secured enough support to advance the scanning mandate.
This article investigates AI recruitment software, highlighting concerns that these systems may perpetuate biases and lead to discriminatory hiring practices. It emphasizes the need for transparency and accountability in how these AI tools are developed and deployed.
Google's new reCAPTCHA Mobile Verification initiative is criticized for blocking users running independent, privacy-focused Android versions. This move is seen as another step by Google to lock users into its ecosystem, limiting user control over their browsing experience and privacy.
The Supreme Court's ruling on Section 702 of the Foreign Intelligence Surveillance Act (FISA) has raised significant concerns about government surveillance capabilities. This decision could potentially undermine the effectiveness of current intelligence-gathering programs.
Meta's new AI image generation tool, Muse Image, allows users to create AI-generated content using public Instagram photos and reels. This feature is enabled by default and can even incorporate specific Instagram profiles by mentioning them in the Meta AI app.
DuckDuckGo has updated its browser to block most video advertisements on YouTube. This feature aims to enhance user privacy and the browsing experience by preventing unwanted ad interruptions.
New cars will be equipped with cameras pointed at the driver's face. This development coincides with other cybersecurity news, including Canada's successful hacking of a ransomware gang, charges against two individuals for aiding Chinese hackers in Taiwan, and newly discovered vulnerabilities affecting Hoymiles solar panels.
The FBI raided the home of a Texas activist and subsequently offered her $200,000 to become an informant against Antifa. This action suggests a broader conspiracy theory and aligns with recent political rhetoric concerning such groups.
Six years after warning that automated content moderation should be temporary and transparent, the EFF observes that AI-driven content moderation has become a permanent fixture on online platforms. Initially used for specific threats like spam and child abuse material, AI is now widely employed to flag and remove content, raising ongoing concerns about its impact on freedom of expression.
The Electronic Frontier Foundation (EFF) is actively working to ensure that the development and deployment of AI technologies prioritize the privacy and free expression of individuals. They are urging public support through donations to fund their advocacy, which includes mobilizing against potentially harmful legislation, scrutinizing government AI initiatives, and testifying before Congress on AI safety and rights.
Victims of the Predator spyware, in a "Predatorgate" scandal, have initiated an €8 million lawsuit against its maker, Cytrox. The lawsuit highlights ongoing concerns about spyware abuses and privacy violations.
An EU Member of Parliament (MEP) involved in a spyware inquiry had their phone infected with Pegasus spyware. This incident has led campaigners to demand an immediate investigation and the long-delayed implementation of recommendations from the PEGA Committee regarding surveillance technologies.
Tesco, a major UK supermarket chain, is expanding its use of facial recognition technology across its stores to combat shoplifting. The company plans to deploy this technology in an additional 150 stores by the end of the year, increasing its surveillance capabilities.
Flock's surveillance cameras can identify vehicles using a "Vehicle Fingerprint" based on decals, bumper stickers, and roof racks, even without license plate information. This system allows law enforcement to search for multiple vehicles believed to be moving together, facilitating case building with less upfront data.
A former Member of the European Parliament, Stelios Kouloglou, was reportedly targeted with Pegasus spyware. This occurred while he was part of a committee investigating the misuse of commercial surveillance tools within the European Union.
A developer claims Google warned him about a potential account hijack but then proceeded to charge him $11,000 for security services. He alleges that after reporting suspicious activity, Google offered to secure his account for a fee, which he accepted, only to be billed an exorbitant amount.
New Jersey has enacted a new law that bans the sale of sensitive data and establishes a data broker registry. This legislation, signed by Governor Mikie Sherrill, applies to all entities and covers all sensitive data as defined by the New Jersey Data Privacy Act.
This article from EFF Deeplinks provides guidance for individuals looking to remove online data that could reveal their queer identity. It explains that personal information is primarily found on sites where it was voluntarily posted or through data brokers who collect and sell it, offering steps to search for and make this information harder to find.
X Corp. is petitioning the FTC to waive a 2022 order that requires regular reporting on its privacy violations, stemming from the misuse of user data for targeted advertising. The EFF and other organizations are urging the FTC to reject this petition, citing past privacy failures and X's recent integration of its AI model Grok, which was trained on user data without explicit consent.
India's government has given WhatsApp three days to respond to security concerns regarding its new username feature. Officials are worried that the rollout could facilitate impersonation and pose privacy risks, demanding Meta explain its security measures. The government is urging a pause on the feature until these concerns are adequately addressed.
