privacy

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
TikTok has agreed to a $400 million settlement with the U.S. Department of Justice to resolve a lawsuit alleging violations of child privacy laws. The lawsuit, filed in 2024, accused the company of improperly collecting data from users under 13 and failing to comply with parental requests to delete accounts. The settlement includes an immediate payment of $300 million and an additional $100 million contingent on the dissolution of a prior consent decree related to Musical.ly.

Scot NHS trust probes access to medical records of 9-year-old girl after man arrested on suspicion of murder
NHS Tayside is investigating an alleged data breach involving the medical records of a nine-year-old girl who died earlier this week. The breach reportedly occurred at Ninewells Hospital, where staff may have accessed the child's file without authorization or clinical need. A man has been arrested and charged in connection with the girl's death.

23andMe Settles Data Breach Lawsuit for $18 Million
Genetic testing company 23andMe has reached an $18 million settlement with 42 state attorneys general following a significant data breach in 2023. The agreement includes mandates for the company to implement stricter data security measures to prevent future incidents.

Your next car could be watching your face
New regulations in the EU and upcoming US mandates require driver-monitoring technology in all new cars to enhance safety by detecting drowsiness and distraction. However, these systems raise significant privacy concerns, including constant biometric surveillance, potential data sharing with insurers, increased vehicle costs, and the risk of false positives or expanded monitoring through software updates. Consumers are advised to research privacy policies and disable non-essential data-sharing features when purchasing new vehicles.

Telco giant KDDI says data breach affects over 12 million people
KDDI, a major Japanese telecommunications company, has reported a significant data breach impacting over 12 million individuals. The breach occurred on an email platform utilized by five national internet service providers, resulting in the exposure of email addresses and passwords.

Supreme Court allows Texas app law requiring age verification to take effect
The Supreme Court has permitted a Texas law requiring app age verification to take effect. Advocacy and technology trade groups had sought an emergency stay of the Texas App Store Accountability Act.

Claude Code’s hidden tracker was an “experiment,” says Anthropic
A researcher discovered a hidden tracking mechanism within Anthropic's Claude Code client that encoded user traffic data based on system time zones. Anthropic has since removed the feature, stating it was an experimental measure to prevent account abuse and protect against model distillation, potentially linked to recent US government export controls.