What regulators just said.

EEOC enforcement action against construction company for national origin discrimination and retaliation, signaling agency willingness to prosecute bias claims involving potential algorithmic or hiring system abuse.

EEOC settles $230,000 disability discrimination case against Walmart, signaling enforcement of hiring algorithm fairness and accessibility obligations under disability law.

EEOC announces $5.5 million settlement with trucking company for nationwide sex discrimination in hiring, signaling enforcement priority on discriminatory employment decisions and AI-assisted screening.

EDPB announces coordinated enforcement action across EU member states targeting GDPR transparency and information obligations, signaling heightened regulatory scrutiny of data controller practices.

FTC Chairman directs prominent tech companies to comply with the Take It Down Act by May 19 deadline, signaling enforcement priority on nonconsensual intimate image removal obligations.

NIST CAISI issued a formal RFI to solicit stakeholder input on security standards and best practices for AI agent systems, signaling emerging regulatory focus on autonomous AI deployment risks.

FTC enforcement action against company creating fake business listings and reviews to deceive consumers about service provider legitimacy.

FTC enforcement action against Shutterstock for unfair and deceptive subscription practices including charging without consent and obscuring cancellation terms.

FTC begins enforcement of the TAKE IT DOWN Act, requiring platforms to remove nonconsensual intimate images on victim request.

FTC enforcement action against Cox Media Group and two other firms for deceiving customers by falsely claiming an AI service could target ads using smart device conversations without valid consumer opt-in.

Reddit post amplifying exposure of California data brokers blocking consumer opt-out rights, highlighting real-world friction in exercising CPRA deletion and access rights.

Reddit user asks about scope and mechanics of EU chat control, specifically whether AI scanning applies to past messages or only future ones, raising data processing and impact assessment questions.

AI chatbots are unintentionally disclosing individuals' phone numbers through training data leakage and retrieval, raising immediate data protection and consent obligations.

FTC enforcement action against Cox Media for false and deceptive claims about using AI to track consumer conversations, raising obligations around truthful AI disclosures and misrepresentation.

Krispy Kreme settles $1.6M FTC case over unlawful biometric data collection and processing without consumer consent, highlighting data privacy enforcement and disclosure obligations.

Lawyer expresses concern that practitioners are filing briefs with unverified AI-generated citations without fact-checking, suggesting inadequate human oversight of AI-assisted legal work product.

Texas AG sues Discord to enforce age verification requirements under the SCOPE Act despite federal court injunction blocking the law's enforcement.

Online age verification systems collect sensitive personal data to gate content access, creating GDPR compliance and privacy engineering challenges for product teams.

French social platforms are using hand movement biometrics for age verification, raising data minimization and biometric processing concerns under GDPR.

A consumer questions whether a photo company's facial recognition scan for event photo matching is transparent about data handling and deletion practices.

Trump Mobile publicly disclosed a customer data exposure incident, triggering breach notification and state-specific data security compliance obligations.

WiFi signal analysis can now identify individuals with high accuracy, raising questions about whether such biometric inference requires lawful basis and consent under data protection regimes.

AI document reconstruction system reveals that failure modes hide in procedural logic and uncertainty preservation rather than obvious hallucinations, exposing gaps in adversarial testing.

Product leader wrestling with where to place API deprecation policy to balance contract enforceability against sales friction in a multi-jurisdiction B2B SaaS business.

Anthropic's Cowork platform lacks audit logging and compliance tracking despite legal professionals becoming its top user segment, creating a mismatch between product marketing and documented guardrails for regulated law firm workflows.