HeadFlash

Privacy · daily

HeadFlash Privacy

Tracking, data rights and the fight for a private internet.

Your niches

By subscribing you agree to receive the HeadFlash newsletter and accept our Privacy Policy. We use double opt-in — confirm via the email we send; unsubscribe anytime.

The quiet erosion and the pushback — tracking, data brokers, surveillance law and the rights you did not know you were signing away. We follow who is collecting what, who is fighting it, and the rulings and tools that tip the balance back toward you.

Topics in this section

  1. noyb Files Five Complaints Against Scale AI Over Worker Tracking Privacy group targets Scale AI's Outlier platform in four countries, alleging illegal monitoring of freelancers who train AI models.
  2. Samsung TV telemetry, Johns Hopkins AI leak, and India privacy law fight A hacker finds Samsung TVs recording audio and screenshots for ads, 3,182 patient records went into an unapproved AI tool, and 21 Indian publishers sue over privacy law.
  3. OpenAI cuts its top models off from the live internet after security scares OpenAI locks advanced models offline, Google opens a Gmail ad loophole, and EU ambassadors agree six cookie purposes that skip consent.
  4. eMudhra exits TLS business after 8 weak-key certificates An Indian certificate authority quits global SSL/TLS after researchers found private keys crackable in milliseconds, plus Malaysia's key custody and a Flock map.
  5. Judge orders Meta to pay $25B over Facebook privacy deception Meta hit with a $25 billion New Mexico penalty, OPM ruled to have illegally shared federal worker records with DOGE, and a PHP flaw sparks breach warnings.
  6. Court: OPM broke privacy law giving DOGE federal employee records A New York federal court ruled OPM unlawfully handed millions of federal employee records to DOGE, while Telegram and AI data brokers face new scrutiny.
  7. Meta opens news scraping rights as WhatsApp hides AI orders Meta's October 30 terms let it scrape news sites for AI, while WhatsApp quietly embedded 102 hidden AI instructions in its help pages.
  8. Meta hack hits 1,500 people as 15 NHS staff fired over record snooping Meta confirms stolen GitHub credentials exposed data on 1,500 people, while an NHS trust sacks 15 staff for accessing Nottingham attack victims' records.
  9. Citizen Lab: Discover-Tech ads delivered zero-click spyware to Al Jazeera devices Citizen Lab says an Israeli ad agency's platform served millions of ads that covertly installed spyware, including on dozens of Al Jazeera devices.
  10. Doctoralia strips health data trackers after Markup probe Doctoralia removed web trackers that leaked patient searches and appointment details to Google, LinkedIn and TikTok, while Washington immigration arrests tied to driver data jump fivefold.
  11. Coupang hit with $466M privacy fine as Elgin College bags Flock cameras South Korea's record data-breach penalty, Pegasus data reaching NSO, and a college that had to trash-bag its own cameras.
  12. Norway fines Microsoft's Xandr $9.6M over Grindr data sharing Norway's largest-ever privacy fine hits Microsoft's Xandr for exposing Grindr users' sensitive data in ad auctions.
  13. Google's $10M bid for Spirit Airlines data draws 120 lawmakers' warning Plus: Dutch push for a kill switch on EU police data deals, and the ICO probes a 169% surge in WhatsApp scam calls.
  14. Suffolk County Presses Flock Safety on 200 License Plate Cameras Lawmakers question data retention, oversight of a 200-camera license plate reader network, while the ICO secures privacy changes from 10 AI developers.
  15. Meta's Muse Builds Profiles of Non-Users as Church Hack Exposes 850,000 Meta's AI assistant drafts hourly dossiers on people who never signed up, while a South Korean megachurch breach may have hit 850,000 members.
  16. Denmark's CPR Register Breach Hits 8.8 Million; FBI Cuts Accenture After PeopleSoft Hack Denmark's national register exposed 8.8 million records, the FBI removed an Accenture contractor over an unpatched system, and Indonesia passed a sweeping data law.
  17. Denmark CPR Breach Exposes 8.8 Million Records Denmark calls the population register breach extremely serious, Seattle bans data-driven grocery pricing, and Raleigh weighs driverless patrol cars.
  18. German Police Read Signal and WhatsApp Messages via Linked Devices Germany's customs agency has turned messenger device-linking into a permanent surveillance tactic, plus Italy's €7M IQVIA fine and more.
  19. Ethereum Foundation launches zkAPI for private AI payments on mainnet Ethereum's new zkAPI lets users pay for AI models without revealing identity, while Delhi's 2,500 AI camera plan and Australian chatbot privacy reforms raise fresh concerns.
  20. Pentagon alerts millions after DMDC breach; Palantir faces 44,000 NHS objections Pentagon notifies service members of a nine-month DMDC hack, while 44,000 object to Palantir's NHS data platform and a study finds cars sharing more data than phones.
  21. Newsom Vetoes AB 1542 as 19 of 21 Cars Leak Data California keeps sensitive data on sale, connected cars phone home, and a filesystem flaw tracks users across every major OS.
  22. Meta hit with 43 million violations in New Mexico Cambridge Analytica verdict A Santa Fe jury found Meta misled users over Cambridge Analytica, with penalties that could top $200 billion. Plus: Apple's new watch AI, PACER fees, and more.
  23. Australia Blames OpenAI Agent for Medicare Hack as Google Fined €403M An OpenAI agent hacked Australia's Medicare portal, Google pays €403M over hidden tracking, and the Supreme Court greenlights a voter-purge database.
  24. TikTok Pays £12.7m UK Child Privacy Fine as EU Warns on Quantum Threat TikTok drops its appeal and pays a £12.7m UK fine over children's data, while EU supervisors warn quantum computers could break today's encryption.
  25. Senate hearing targets Flock Safety as wrongful arrest and 240 misuse cases surface Flock's CEO skipped a Senate hearing where a wrongly jailed woman testified, researchers reported 240 ALPR misuse incidents and exposed cameras.
  26. Seattle Bans Algorithmic Grocery Pricing as Sweden Fines Miljödata Seattle becomes the first US city to ban algorithmic grocery pricing, while Sweden fines Miljödata $183,000 over a breach affecting 2.2 million people.
  27. Google fined $462M in Ireland as BYD scrubs China from privacy policy Google owes Ireland $462M over location tracking, BYD quietly rewrites its Australian privacy policy, and cheap smart glasses leak user data.
  28. OpenAI Cookie Links ChatGPT Accounts to Browsing on 936 Ad Pixels OpenAI's ad collector ties your ChatGPT account to what you do on Chewy, Wayfair and hundreds of other sites, while Reform UK pledges to scrap GDPR.
  29. Apple Fights Gag Order as Flock Camera Leak Exposes 1.6M Images Apple challenges UK secrecy over an encryption backdoor demand, hackers pull 1.6 million images from a Flock camera, and the EU's digital ID wallet faces readiness doubts.
  30. FBI biometric database exemption draws civil liberties pushback FBI seeks to strip Privacy Act protections from its biometric mega-database as states move to mandate age checks at the operating system level.