Data Protection

Business 4 min Norway Fines Microsoft's Xandr NOK 92 Million Over Grindr Users' Data in Ad Auctions The regulator's largest ever fine rests on one point: an adtech intermediary cannot simply trust that the app... DA Daniel Koh 14 Oct ASEAN Tech 4 min Indonesia Passed a Law to Give Its Government One Set of Data, and Parliament a Veto on Sending It Abroad The One Data law sets a single national reference for budgets and welfare, a 24-hour incident-reporting deadli... SA Sarah Chew 12 Oct Privacy & Data 6 min OpenAI Has Hundreds of Contractors Reading Whole ChatGPT Conversations They see whole conversations and score them 1 to 7. Names are stripped; the memory summaries describing where... PR Priya Nair 16 Sep Privacy & Data 6 min Nobody Broke Into Revolut. Someone Asked, From a Government Domain. Passports, verification selfies and full transaction histories went out through the channel that answers offic... PR Priya Nair 14 Sep Privacy & Data 6 min Australia Would Make Data Use Pass a Fairness Test. The Erasure Right Reaches Almost Nobody. An objective fair and reasonable test replaces consent as the gate. The right to erasure applies only above A$... PR Priya Nair 11 Sep Privacy & Data 8 min Singapore's Privacy Regulator Has Not Published a Reasoned Decision Since May We counted all 387 enforcement pages the PDPC publishes. Over the past two years, 58 of 70 outcomes were volun... PR Priya Nair 7 Aug Cybersecurity 7 min The Test Data Was Supposed to Be Fake. It Held 70,000 Real NRIC Numbers A Singapore Land Authority test dataset created in 1998 was meant to hold only mock records. It held real name... CY Cyber Team 5 Aug Privacy & Data 8 min Malaysia Told Firms an AI Cannot Decide Alone — In Guidance That Is Not Binding Malaysia issued guidelines on automated decisions, impact assessments and privacy by design on 30 April. They... PR Priya Nair 5 Aug Privacy & Data 8 min GDPR at the 2026 Midpoint: The Real Signal Is Operational Security Enforcement Mid-year 2026 stock-takes put cumulative GDPR fines at around €7 billion since 2018, but the headline total is... PR Priya Nair 2 Jul AI & ML 8 min EU AI Act Omnibus: Annex III High-Risk Deadline Extends 16 Months, Annex I Gets 12, Nudifier Apps Banned from December 2026 A provisional political agreement reached on 7 May 2026 pushes Annex III standalone high-risk AI compliance to... PR Priya Nair 2 Jun