HeadFlash

Privacy · daily

HeadFlash Privacy

Tracking, data rights and the fight for a private internet.

Your niches

By subscribing you agree to receive the HeadFlash newsletter and accept our Privacy Policy. We use double opt-in — confirm via the email we send; unsubscribe anytime.

The quiet erosion and the pushback — tracking, data brokers, surveillance law and the rights you did not know you were signing away. We follow who is collecting what, who is fighting it, and the rulings and tools that tip the balance back toward you.

  1. German Police Read Signal and WhatsApp Messages via Linked Devices Germany's customs agency has turned messenger device-linking into a permanent surveillance tactic, plus Italy's €7M IQVIA fine and more.
  2. Ethereum Foundation launches zkAPI for private AI payments on mainnet Ethereum's new zkAPI lets users pay for AI models without revealing identity, while Delhi's 2,500 AI camera plan and Australian chatbot privacy reforms raise fresh concerns.
  3. Pentagon alerts millions after DMDC breach; Palantir faces 44,000 NHS objections Pentagon notifies service members of a nine-month DMDC hack, while 44,000 object to Palantir's NHS data platform and a study finds cars sharing more data than phones.
  4. Newsom Vetoes AB 1542 as 19 of 21 Cars Leak Data California keeps sensitive data on sale, connected cars phone home, and a filesystem flaw tracks users across every major OS.
  5. Meta hit with 43 million violations in New Mexico Cambridge Analytica verdict A Santa Fe jury found Meta misled users over Cambridge Analytica, with penalties that could top $200 billion. Plus: Apple's new watch AI, PACER fees, and more.
  6. Australia Blames OpenAI Agent for Medicare Hack as Google Fined €403M An OpenAI agent hacked Australia's Medicare portal, Google pays €403M over hidden tracking, and the Supreme Court greenlights a voter-purge database.
  7. TikTok Pays £12.7m UK Child Privacy Fine as EU Warns on Quantum Threat TikTok drops its appeal and pays a £12.7m UK fine over children's data, while EU supervisors warn quantum computers could break today's encryption.
  8. Senate hearing targets Flock Safety as wrongful arrest and 240 misuse cases surface Flock's CEO skipped a Senate hearing where a wrongly jailed woman testified, researchers reported 240 ALPR misuse incidents and exposed cameras.
  9. Seattle Bans Algorithmic Grocery Pricing as Sweden Fines Miljödata Seattle becomes the first US city to ban algorithmic grocery pricing, while Sweden fines Miljödata $183,000 over a breach affecting 2.2 million people.
  10. Google fined $462M in Ireland as BYD scrubs China from privacy policy Google owes Ireland $462M over location tracking, BYD quietly rewrites its Australian privacy policy, and cheap smart glasses leak user data.
  11. OpenAI Cookie Links ChatGPT Accounts to Browsing on 936 Ad Pixels OpenAI's ad collector ties your ChatGPT account to what you do on Chewy, Wayfair and hundreds of other sites, while Reform UK pledges to scrap GDPR.
  12. Apple Fights Gag Order as Flock Camera Leak Exposes 1.6M Images Apple challenges UK secrecy over an encryption backdoor demand, hackers pull 1.6 million images from a Flock camera, and the EU's digital ID wallet faces readiness doubts.
  13. FBI biometric database exemption draws civil liberties pushback FBI seeks to strip Privacy Act protections from its biometric mega-database as states move to mandate age checks at the operating system level.
  14. EFF audit: police logged 'LOL' and 'idk' to search Flock camera network An EFF review of Flock Safety logs found officers across the US searched license plate data with reasons like LOL, LMAO and idk, and Lee's Summit now demands MOUs.
  15. DHS officers posed as voters to access state election records, whistleblower says A federal whistleblower says DHS agents misrepresented themselves as voters to view state voting records, drawing Democratic warnings of thousands of state law violations.
  16. FTC Bans GM From Selling Driver Data for Five Years California curbs AI in schools, Florida confirms DMV breach, and Oregon cities drop Flock cameras as privacy fights sharpen.
  17. South Korea's 10% Privacy Fine Regime Starts as Musk PAC Sells Voter Data Korea's amended PIPA takes effect with the world's highest fine ceiling, while Musk's America PAC quietly expands what it can do with VoteSafe users' data.
  18. Microsoft Signs 30-Page Student AI Privacy Deal as New Mexico Tests Facebook Microsoft becomes first major AI developer to accept binding school privacy standards, while New Mexico opens a Cambridge Analytica-linked trial against Facebook.
  19. Grindr Settles £26m HIV Data Claim; California Brokers Resist DROP Grindr pays £26m over alleged HIV data sharing, California brokers fight DROP deletion platform, LG TVs face listening concerns, and Proton VPN surges in Vietnam.
  20. Trezor Breach Expands to 81,000; DHS Subpoenas 17M Driver Records Trezor's logistics breach now hits 81,000 customers, while California fights a DHS subpoena for 17 million commercial driver records.
  21. IDScan faces lawsuits over alleged breach of 153 million driver's licenses Lawsuits target IDScan after hackers allegedly stole 153 million driver's licenses. Also: Thomson Reuters court data breach, Mullvad DNS shutdown, and more.
  22. French Hospital Fined €500,000 Over Breach of 727,000 Records CNIL fines Hôpital privé de la Loire for security lapses after a hacker stole data on over 727,000 patients and relatives.
  23. FBI Probes 150M Driver's Licenses Sold on Dark Web Massive breach of US driver's license data linked to IDScan.net; FBI opens investigation. Also: TikTok's $400M COPPA settlement and more.
  24. ChatGPT iMessage Integration Threatens Apple Encryption OpenAI's new Mac plugin can read and analyze iMessage chats, raising alarms over end-to-end encryption and privacy for all participants.
  25. GS Retail fined $9.3M over leak of 1.66M customers South Korea fines GS Retail, a rushed school tool leaks records, Bandai's ring skips tracking, and ChatGPT reads iMessage threads.
  26. Carhartt breach hits 12.9M accounts; Manchester Airports loses 86GB Carhartt breach exposes 12.9M accounts, Manchester Airports loses 86GB, and Meta fixes smart glasses LED loophole.
  27. UK Poll Shows 90% Reject Secret Surveillance Orders After Apple Row A new poll reveals overwhelming public opposition to secret UK surveillance orders, while Ring rolls out encryption that limits police access and Flock faces a Senate probe.
  28. Brazil Hits TikTok With $29.8M Fine Over Minor Tracking Brazil fines TikTok $29.8M for tracking 8 million minors; Ring's new encryption limits police access; Hawley probes Flock's camera network.
  29. GAO Warns Retirement Plans May Sell Your Data; Apple Reverses Hide My Email Change Retirement plans may share or sell personal data, Apple backs down on Hide My Email domain change, and Hollywood police share plate data widely.
  30. Twitch and Amazon Face Class Action Over AI Training on Streamer Data A streamer sues Twitch and Amazon over using content for AI training without consent, plus California's data broker bill and Flock's privacy battles.