If you make or sell digital products in the EU, you must now report all exploited vulnerabilities and “severe” incidents that impact their security within 24 hours of becoming aware of them. These rules apply to every sector that produces products with a digital element – from baby monitors to smart watches and apps.
Technology
Posted inBest Practices
Preparing for prediction markets regulations is a safe bet
Prediction market contracts initially gained popularity as a way for people to engage in sports betting, but have evolved to mimic financial derivative products with little institutional oversight.
Posted inData Privacy
Grindr agrees $35 million settlement for U.K. complaint over serious data breaches
The tech company behind gay dating app Grindr has agreed to make a $35.2 million settlement over allegations that it shared sensitive personal medical information—including whether people were HIV positive—with third parties.
Posted inData Privacy
Uber’s driver-blocking algorithm draws nearly $1 billion Dutch privacy penalty
The Dutch data protection authority has fined Uber $959.2 million for using automatic decision-making tech to deactivate drivers’ accounts if they received poor customer reviews.
Provided by
From Risk to Readiness: Preparing Your Workforce for AI and Data Challenges
Defensible compliance programs personalize training and offer practice opportunities. The learning metrics L&D leaders look at gauge the impact of the program, not just participation. To create a stronger program, Skillsoft developed a concise brief that explains what makes up a modern compliance program.
Posted inData Privacy
Meta reaches $18B settlement with states over child safety violations
Meta has agreed to pay up to $18 billion and overhaul teen safety features on Facebook and Instagram as part of a settlement with 47 states, the District of Columbia, and U.S. territories.
Posted inRegulatory Enforcement
TikTok pays $400M to settle children’s privacy allegations, but agreement terms kept secret
TikTok has agreed to pay $400 million to the Department of Justice (DOJ) to settle long-running complaints that the company has repeatedly violated children’s privacy. The DOJ sued TikTok’s predecessor, Musical.ly, in 2019 for allegedly not complying with the Children’s Online Privacy Protection Act (COPPA), which prohibits the collection, use and disclosure of personal data […]
Posted inBest Practices
From mainframes to Agentic AI, what legacy system discipline can teach us about building trustworthy customer data platforms
For the past decade, I’ve led customer data and regulatory platforms at one of the world’s largest card issuers, following years modernizing mainframe systems at IBM. The mainframes I maintained early in my career were not sophisticated by modern standards. They earned the trust of the organizations that depended on them anyway, because every transaction […]
Posted inBest Practices
China’s “Mythos moment” is coming. Its release gate is already built.
China’s “Mythos moment” is coming. Its release gate is already built. Washington spent June 2026 governing Mythos-level models for the first time: Systems whose autonomous cyber and agentic capabilities register as national security consequences. The label borrows from Anthropic’s Mythos 5, restricted that month; the government’s attention also reached OpenAI’s GPT-5.6. No Chinese lab has […]
Posted inBanking
JPMorgan quietly debanked Polymarket over regulatory fears, report said
JPMorgan reportedly debanked the prediction market Polymarket last year over regulatory concerns. This incident underscores the compliance risks banks face when servicing prediction markets.
