Digital privacy, surveillance, data protection, civil liberties
RSS feed for this categoryThe article discusses how the Department of Homeland Security (DHS), including ICE, was designed and has been used as a "weapon." It highlights how years of "counterterror" surveillance paved the way for abuses, referencing the ICE raid on Rep. Ilhan Omar.
The Electronic Frontier Foundation (EFF) has won a preliminary ruling in its lawsuit against the Trump administration's social media surveillance program. The lawsuit, filed on behalf of labor unions, challenges the government's use of AI and other tools to monitor the online speech of noncitizens, arguing it forces individuals to choose between free expression and their immigration status.
Law enforcement from 17 countries, coordinated by INTERPOL, have arrested 95 suspects in an operation targeting the distribution of child sexual abuse material (CSAM) online. The crackdown focused on messaging groups used for illicit content sharing.
The Indian government has mandated that telecom providers must display registered caller names alongside phone numbers for all incoming calls on 4G and newer networks starting November 1, 2026. This initiative aims to enhance call identification and combat spam and fraudulent calls.
The EFF and ACLU of Wisconsin are petitioning the Wisconsin Supreme Court to require warrants for law enforcement's retrospective searches of Automated License Plate Reader (ALPR) databases. The organizations argue that such warrantless searches constitute mass surveillance and infringe upon privacy rights, particularly for religious organizations and their congregants.
An audit by the DHS Office of Inspector General found that the TSA is not properly safeguarding passenger facial recognition data. A vendor was able to access and extract sensitive passenger information during system troubleshooting without TSA's knowledge, and TSA lacked clear policies for data handling, tracking, and deletion.
The EFF has won a key court victory in its lawsuit challenging the government's "Catch and Revoke" mass surveillance program, which allegedly chills free speech online. The EFF newsletter also covers guides for reducing reliance on Big Tech and a win against anti-VPN laws.
An OpenAI employee, Abdulrahman Alfozan, has been arrested for allegedly planting a hidden recording device in an executive conference room. The device was reportedly used to covertly record sensitive conversations within the company's San Francisco offices. Alfozan faces charges related to the illegal interception of oral communications.
A Saudi national employed as an engineer at OpenAI has been arrested for allegedly installing a covert recording device in a conference room at the company's San Francisco headquarters. The device was reportedly intended to capture confidential discussions.
A California trial court dismissed a case challenging San Jose's use of Automatic License Plate Reader (ALPR) data, which EFF and ACLU of Northern California argued constituted warrantless surveillance. Despite this disappointing ruling, EFF plans to appeal, citing conflicting federal court decisions that have recognized ALPRs as mass surveillance and violations of privacy rights.
This article discusses the historical fight for encryption rights, highlighting the landmark Bernstein v. Department of Justice case where code was recognized as protected speech. It introduces the "Privacy's Defenders" podcast, which features individuals who have championed digital liberties.
The Norwegian Data Protection Authority (DPA) has fined Xandr, a Microsoft-owned advertising unit, a record €8.6 million for illegally relaying sensitive user data from Grindr to advertisers. The DPA deemed the breach "very serious" and issued the highest penalty to date.
An Arkansas mother who requested public records about a new data center is now facing a lawsuit. Similar cases in California highlight the need for a federal law to prevent lawsuits aimed at silencing free speech.
Norway's Data Protection Authority has fined Microsoft-owned Xandr $9.6 million for unlawfully processing and sharing sensitive user data from the dating app Grindr. The fine was issued for violations related to GDPR, specifically the sharing of data without explicit user consent. This action highlights ongoing regulatory scrutiny of data handling practices in the digital advertising space.
This report details the increasing use of technology by authoritarian regimes for surveillance, censorship, and repression. It highlights how governments are leveraging tools like facial recognition, AI-powered monitoring, and digital censorship to control populations and suppress dissent. The article urges global action to counter these trends and protect fundamental rights.
Personal AI agents are being rolled out, but are already causing issues such as Amazon blocking Meta's Muse due to lack of bot identification and general privacy concerns arising from various agents. Despite these problems, the tech industry remains captivated by the potential of these services.
The federal government has been unlawfully consolidating data, exposing private information through initiatives like DOGE and agency-to-agency data sharing. This consolidation risks mistakes, abuses, and chilling participation in society, particularly for marginalized groups. EFF and other groups are fighting these practices through lawsuits and legislative efforts, advocating for stronger data privacy protections.
The EFF participated in Oakland Tech Week, co-presenting a session focused on organizing for a better technological future. The event brought together advocates and activists to discuss how technology can empower rather than oppress communities and to counter surveillance and corporate claims about neighborhood technology.
Turkey is conducting a state-led crackdown on LGBTQ+ organizations, media, and activists, involving website blocks, detentions, and raids on digital devices. These actions aim to suppress organizations advocating for LGBTQ+ rights and those reporting on their oppression, threatening freedom of expression and association.
This article discusses the growing trend of age verification laws globally, which are being implemented for social media access and other online services. It highlights concerns that these laws, often requiring identity documents for verification, may disproportionately affect individuals who cannot provide such proof, potentially restricting their right to access information.
Customs and Border Patrol's predictive policing units are reportedly using financial data to target individuals for anomalous financial activities. These units are obscuring their involvement by operating through local law enforcement agencies. Lawmakers are urged to address federal agencies' use of predictive policing and the misuse of financial and travel information.
This article announces "DAF Day," an event promoting the use of Donor-Advised Funds (DAFs) for charitable giving. It encourages readers to consider supporting the Electronic Frontier Foundation (EFF) through their DAFs, highlighting how such contributions help the EFF defend encryption, privacy, and security, and shape technology policy.
War Secretary Pete Hegseth has announced Project Meridian and a new Autonomous Warfare Command, signaling a future military heavily defined by Artificial Intelligence. However, the initiative is criticized for potentially inviting conflicts of interest and a lack of oversight.
Ron Deibert of Citizen Lab criticizes the Trump administration's policies, accusing them of advancing pervasive surveillance. He also points to certain technology executives who are allegedly complicit in these efforts.
U.S. Senator Kirsten Gillibrand has reintroduced the Data Protection Act, aiming to establish an independent Data Protection Agency. The proposed agency would be responsible for safeguarding the personal data of Americans, addressing what is described as a national data privacy crisis.
EPIC counsel Mayu Tobin-Miyaji testified at a New York City Council hearing on bills aimed at establishing safeguards for artificial intelligence (AI). The testimony highlighted existing AI harms affecting New Yorkers, urging the council to address these issues.
The article discusses the increasing use of AI agents and the potential risks associated with them acting outside their designated operational boundaries. It highlights concerns that AI agents might collect or process data beyond their intended scope, leading to privacy violations.
Anthropic has launched a new three-tier cyber verification program, integrating its existing CVP and Project Glasswing offerings. This program provides tiered access to its most advanced AI models.
Denmark's national civil registration database experienced a significant data leak, exposing 8.8 million records. The breach occurred due to the abuse of access by a private company, leading to the exposure of personal details for individuals, including those who have passed away or emigrated.
Privacy International (PI) has responded to the UK Government's consultation on workplace monitoring technologies. PI advocates for stronger protections for workers against invasive surveillance and calls for greater transparency and accountability from employers.
Hackers gained unauthorized access to Denmark's Central Person Register (CPR) system by exploiting a company's lawful access privileges. This breach resulted in the theft of personal data belonging to approximately 8.8 million registered citizens.
EPIC has submitted comments on proposed rules for Vermont's Age-Appropriate Design Code. These rules aim to implement specific protections for children within the state.
This article discusses how ongoing litigation surrounding pixel tracking, particularly under the Electronic Communications Privacy Act (ECPA) and the Children's Online Privacy Protection Act (COPPA), can offer valuable guidance for the Supreme Court's upcoming case, Salazar v. Paramount Global. These cases represent broader efforts to combat harmful online tracking and surveillance practices.
Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8 million) for inadequate data anonymization practices. The agency stated these failures could have exposed and de-anonymized the health data of approximately one million patients.
Hackers compromised patient data at two healthcare firms, Clover Health Investments and AngMar Management Services, in July, impacting approximately 250,000 individuals. The stolen information included sensitive patient details.
Apple is tightening macOS Full Disk Access (FDA) controls due to security risks associated with AI agents. Some developers have been using FDA in ways that could expose sensitive user data like files, mail, messages, and browsing history without full user awareness.
Google's Gemini AI model is being developed to gain extensive access to macOS devices. This includes the ability to access files, launch applications, and browse the web without requiring explicit user permission for each action.
Apple is updating its full-disk access permissions to prevent malicious AI agents from accessing user data. This change aims to curb potential abuse of this powerful permission by AI tools that might be used for surveillance or data exfiltration.
EPIC, along with Professor Seema Patel, has filed an amicus brief challenging Spirit Airlines' bankruptcy sale of sensitive employee data to Google. The data is intended for AI training purposes, and the brief utilizes privacy grounds to oppose the transaction.
Congress is considering the American Copyright Protection Act (ACPA), H.R. 10364, a bill that would allow copyright holders to seek court orders to block Americans' access to foreign websites accused of copyright infringement. This legislation explicitly targets VPN providers, requiring them to take steps to block access, and broadens the definition of what constitutes a "foreign piracy site."
Meta has launched 'Muse,' a personal AI agent designed to collect extensive user data for task assistance. This launch has immediately sparked significant privacy concerns among users and privacy advocates.
A federal judge has allowed a lawsuit filed by three labor unions against the Departments of State and Homeland Security to proceed. The lawsuit alleges that the government's social media surveillance program infringes on the unions' members' First Amendment rights by deterring the expression of disfavored viewpoints.
St. Lucie County, Florida, discovered over a dozen Flock cameras whose ownership and deployment are unidentifiable and were not authorized by the county. This situation draws parallels to a decade-old incident involving unidentified StingRay cell phone surveillance devices in Washington D.C.
Ecuadorean authorities have ordered free software developer and security expert Ola Bini to be deported from the country, barring his return for 10 years. Bini was detained without a formal order and informed of his visa revocation, with officials citing a secret report alleging he posed a threat to national security. Human rights organizations were denied entry to his deportation hearing.
The Marin County Sheriff's Office is accused of illegally sharing automated license plate reader (ALPR) data with out-of-state and federal agencies, violating California law. This action puts drivers at risk and is particularly concerning for vulnerable groups like immigrants and abortion seekers.
Google has begun allowing rival, third-party app stores to be distributed through its Play Store, following an antitrust lawsuit by Epic Games. This change gives developers more distribution and billing options and allows users to choose app stores based on competition, which can extend to improved privacy and security.
A federal judge has blocked Utah's SB 73, an age verification law that attempted to outlaw the privacy protections of Virtual Private Networks (VPNs). The court ruled that the law likely violates the U.S. Constitution by imposing significant burdens on businesses and individuals outside Utah. EFF argued that the law demanded technical impossibilities and undermined user privacy.
The Electronic Frontier Foundation (EFF) is promoting "Opt Out October," an initiative encouraging users to reconsider their reliance on major tech companies and take back control of their data. The campaign provides resources and tips for finding alternative software, exploring new social media options, and managing data usage for AI training.
Researchers have evaluated the extent to which modern cars collect and share driver data, analyzing privacy policies and corporate filings from numerous automakers. This data collection is so extensive that cars are described as surveillance platforms, with the profit potential of individual driving data being compared to 'the new oil.'
The UK's Information Commissioner's Office (ICO) has been restructured with a new board and headquarters in Manchester. This change moves statutory powers from a single individual to collective control.
