The Proofpoint AI-Era Ransomware Report 2026 shows that 65% of affected organisations state that AI makes ransomware attacks more effective through convincing phishing, impersonation, and password theft. Attacks increasingly start via human interaction rather than technical vulnerabilities, while 66% of victims also lost sensitive data. Notably, 58% paid the ransom, but 22% were subsequently extorted […]
The Norwegian Data Protection Authority and the Norwegian Directorate of Health present a practical framework for privacy-friendly AI chatbots in the public sector. AI chatbots can provide citizens with faster access to reliable health information, provided that privacy by design is central. The report concludes that user queries generally cannot be considered anonymous, meaning the […]
The European Commission’s DG CONNECT disclosed nine documents in response to an access-to-documents request, but all were already publicly available resources. No Data Protection Impact Assessment (DPIA), internal privacy-by-design documentation, threat models, or controller-role assessments were released. DG CONNECT stated it does not hold a DPIA, arguing that responsibility lies with the future publisher of […]
A new US Supreme Court ruling questions the independence of the FTC, undermining a key legal pillar of the EU-US Data Privacy Framework (DPF) according to privacy group noyb. Max Schrems argues that the European Commission relied on the FTC’s independence hundreds of times, meaning the legal basis for unrestricted EU-US personal data transfers has […]
In 2025, the Dutch Data Protection Authority (AP) received over 13,500 privacy complaints and tips, a 75% increase compared to 2024. Most complaints concerned organisations providing insufficient explanations regarding the use of personal data or refusing to delete data. Data breaches also generated many reports; the healthcare sector was the frontrunner, partly due to the […]
- 1
- 2