Priya Nair is a RECATOOLS editorial persona focused on AI governance, data protection, privacy, digital trust, and responsible technology policy. Articles under this byline explain how organisations can adopt AI and data-driven tools while managing legal, operational, and reputational risk.

About this byline

Priya Nair is a RECATOOLS editorial persona for AI governance, privacy, and digital trust coverage. Articles are produced and reviewed under RECATOOLS editorial supervision.

Editorial responsibility for this byline rests with Jeffrey Tan (Tan Seng Fei), RECASYS, Singapore. Our Editorial Policy sets out how sources are reviewed, how AI-assisted workflows are used, and how editorial desks and personas are defined.

106
Articles
Privacy & Data
Primary beat
May 2026
Writing since
~767 min
Total reading
All 106 Privacy & Data 51 AI & ML 22 Cyber Threat Intel 20 Cybersecurity 11 Finance 1 ASEAN Tech 1

Articles Showing 61–70 of 106

Coiled yellow Ethernet cables on a blue background, illustrating a report on how quickly disclosed vulnerabilities are exploited.
Cyber Threat Intel

Most Exploitation Now Lands Within 48 Hours of the Proof of Concept

CrowdStrike puts 88 per cent of observed proof-of-concept exploitation inside two days, and two China-linked groups inside one. A DPRK-linked group poisoned 131 trusted AI framework packages, which is the finding getting the least attention.

17 Aug 2026 · 8 min read
An open wooden card-index drawer pulled out of a cabinet, filled with upright paper cards behind numbered tab dividers reading 166, 167, 168 and 169.
AI & ML

What a Tool Listing Cannot Tell You About AI Risk

We set the ten OWASP LLM risk categories against what our directory of 1,366 AI tools actually records. Four have a field bearing on them. Six have none — and three of those six cannot be fixed by any directory.

16 Aug 2026 · 7 min read
Rows of labelled blue archive binders on a shelf, illustrating a report on stolen French tax records.
Privacy & Data

France Cut Off the Intruder in June. Taxpayers Found Out in August.

The DGFiP stopped an intruder in late June and said nothing until 14 August, two days after the stolen data was advertised on a criminal forum. Six weeks on it still cannot say how many taxpayers are affected, and the published figures range from 600,000 to two million.

15 Aug 2026 · 8 min read
An open handwritten ledger lying on a worn wooden table — illustrative of an append-only log, the structure key transparency uses to record every key change.
Privacy & Data

Signal Will Now Check You Are Talking to the Right Person. Read What It Cannot Check.

Automatic key verification replaces sixty digits with one tap, audited by Cloudflare and Trail of Bits. It proves the key is globally consistent — not who is holding the phone.

11 Aug 2026 · 6 min read
A person's hands resting on a laptop keyboard, photographed from the side in soft daylight.
Privacy & Data

First-Party, Third-Party: What the Cookie Labels Hide

Six public homepages, a fresh browser profile each, no banner answered: from 0 cookies to 54. But the count is the wrong question — one site's four third-party cookies came from its own operator, while another's forty-three came from twenty-four separate firms, and the browser calls both the same thing. We counted our own page too, and found the zero means less than it looks.

11 Aug 2026 · 8 min read
A security-printed certificate filling the frame with a fine anti-copy crosshatch pattern, above the printed line 'Please remember to sign your certificate' — illustrative of provenance marking in its older, visible form.
Privacy & Data

Claude Now Watermarks Its Text. Here Is Who Else Does, and How to Read Any of It.

What Claude marks and since when, what C2PA and Article 50 actually require, what Vietnam and Singapore demand, and which of these marks a member of the public can currently check. One of them, you cannot.

11 Aug 2026 · 11 min read
An open laptop on a wooden desk with a browser window on screen.
Privacy & Data

What Can a Browser Extension See? We Read the Manifests

The permission dialogue tells you exactly what an extension may do, in a vocabulary that means little until you have seen what each phrase authorises. Read off a real profile: one extension requested 17 permissions, one can attach a debugger to any tab, two can talk to programs outside the browser — and no extension is named here, because a privacy guide is the last place to publish someone's installed software.

11 Aug 2026 · 6 min read
Two hands holding a phone with a blank, bright screen in the dark, city lights blurred behind it — illustrative of the late-night engagement the New Mexico ruling is about.
Privacy & Data

A Judge Called Meta a Public Nuisance. He Left the Algorithm Alone.

New Mexico won $567 million and an injunction over teen safety. The court declined to touch the recommendation system, saying that could collide with Section 230 and the First Amendment.

11 Aug 2026 · 8 min read
A person seen from behind working at a desk of screens in a darkened room.
Privacy & Data

What Does Incognito Mode Actually Do? Less Than the Name Suggests

A private window destroys a storage container when you close it — five things go with it, all of them data your own device was keeping. It has no reach beyond your machine. A page that set no cookie still read this one's platform, screen, timezone, language pair, core count, memory, fonts and a canvas signature, and closing a private window clears none of that.

11 Aug 2026 · 6 min read
A hand holding a magnifying glass over printed records on a desk — illustrating the self-audit this report describes.
Privacy & Data

Two Scripts Load on This Site Before You Consent. We Authorised One.

Yesterday we asked whether anyone knows what their own trackers do. We ran the audit on ourselves: 31 first-party requests, 2 third-party scripts, and a Content-Security-Policy that describes a site we are not running.

11 Aug 2026 · 13 min read
Editorial Policy →