HeadFlash

Privacy · daily

HeadFlash Privacy

Tracking, data rights and the fight for a private internet.

Your niches

By subscribing you agree to receive the HeadFlash newsletter and accept our Privacy Policy. We use double opt-in — confirm via the email we send; unsubscribe anytime.

The quiet erosion and the pushback — tracking, data brokers, surveillance law and the rights you did not know you were signing away. We follow who is collecting what, who is fighting it, and the rulings and tools that tip the balance back toward you.

  1. South Korea's 10% Privacy Fine Regime Starts as Musk PAC Sells Voter Data Korea's amended PIPA takes effect with the world's highest fine ceiling, while Musk's America PAC quietly expands what it can do with VoteSafe users' data.
  2. Microsoft Signs 30-Page Student AI Privacy Deal as New Mexico Tests Facebook Microsoft becomes first major AI developer to accept binding school privacy standards, while New Mexico opens a Cambridge Analytica-linked trial against Facebook.
  3. Grindr Settles £26m HIV Data Claim; California Brokers Resist DROP Grindr pays £26m over alleged HIV data sharing, California brokers fight DROP deletion platform, LG TVs face listening concerns, and Proton VPN surges in Vietnam.
  4. Trezor Breach Expands to 81,000; DHS Subpoenas 17M Driver Records Trezor's logistics breach now hits 81,000 customers, while California fights a DHS subpoena for 17 million commercial driver records.
  5. IDScan faces lawsuits over alleged breach of 153 million driver's licenses Lawsuits target IDScan after hackers allegedly stole 153 million driver's licenses. Also: Thomson Reuters court data breach, Mullvad DNS shutdown, and more.
  6. French Hospital Fined €500,000 Over Breach of 727,000 Records CNIL fines Hôpital privé de la Loire for security lapses after a hacker stole data on over 727,000 patients and relatives.
  7. FBI Probes 150M Driver's Licenses Sold on Dark Web Massive breach of US driver's license data linked to IDScan.net; FBI opens investigation. Also: TikTok's $400M COPPA settlement and more.
  8. ChatGPT iMessage Integration Threatens Apple Encryption OpenAI's new Mac plugin can read and analyze iMessage chats, raising alarms over end-to-end encryption and privacy for all participants.
  9. GS Retail fined $9.3M over leak of 1.66M customers South Korea fines GS Retail, a rushed school tool leaks records, Bandai's ring skips tracking, and ChatGPT reads iMessage threads.
  10. Carhartt breach hits 12.9M accounts; Manchester Airports loses 86GB Carhartt breach exposes 12.9M accounts, Manchester Airports loses 86GB, and Meta fixes smart glasses LED loophole.
  11. UK Poll Shows 90% Reject Secret Surveillance Orders After Apple Row A new poll reveals overwhelming public opposition to secret UK surveillance orders, while Ring rolls out encryption that limits police access and Flock faces a Senate probe.
  12. Brazil Hits TikTok With $29.8M Fine Over Minor Tracking Brazil fines TikTok $29.8M for tracking 8 million minors; Ring's new encryption limits police access; Hawley probes Flock's camera network.
  13. GAO Warns Retirement Plans May Sell Your Data; Apple Reverses Hide My Email Change Retirement plans may share or sell personal data, Apple backs down on Hide My Email domain change, and Hollywood police share plate data widely.
  14. Twitch and Amazon Face Class Action Over AI Training on Streamer Data A streamer sues Twitch and Amazon over using content for AI training without consent, plus California's data broker bill and Flock's privacy battles.
  15. Uber hit with $964M Dutch fine over automated driver bans Dutch regulators fine Uber $964M for automated account suspensions; CBP database abuse exposed; Maryland coalition targets data brokers.
  16. Fake VPNs Flood Chrome Store; FTC Targets Personalized Pricing Hundreds of fake VPN extensions hit Chrome users, while the FTC warns companies on personalized pricing and OpenAI tests new abuse detection.
  17. Meta Faces Trial as Four States Seek Billions Over Child Safety Four states take Meta to court over alleged child harm; rogue ransomware affiliate scams victims; MIT study finds AI image attribution decay.
  18. Meta Files Patent for Glasses That Auto-Record People Meta patents facial-recognition glasses that film without prompting; China boots Windows 10 from agencies; ChatGPT ads hit Europe with consent-first model.
  19. Google Pays $10M for Spirit Airlines Data, Picks Anonymizer Google's $10M Spirit Airlines data deal faces court review; France warns taxpayers after major hack; Russia expands travel surveillance.
  20. Norway orders SATS to fix gym photo checks; Europol plan draws fire Norwegian DPA forces SATS to change check-in photo legal basis, while EDPS warns Europol overhaul risks biometric rights.
  21. Flock Safety Tightens Data Rules After Police Misuse Flock cuts data retention to one week, DHS confirms warrantless ad-auction location buys, and Anthropic watermarks all Claude text.
  22. AI Providers Share One Encryption Key, Researchers Decode 315K Reasoning Blocks A single encryption key across OpenAI, Anthropic, and Google exposed hidden AI reasoning, 182 credentials recovered, and 62 live API keys found.
  23. California DROP Portal Draws 300,000 Deletion Requests California's new DROP platform sees 300,000 requests as 600+ data brokers face mandatory erasure; ALPR data flows to police; AI chatbot age checks criticized.
  24. ICE Pays LexisNexis $6.7M for Data Feeding Palantir Deportation Tools ICE's new procurement reveals AI-driven vetting and facial recognition plans, while California moves to rein in workplace brain data and China tightens data officer rules.
  25. WFP Renews Palantir Deal Despite Leaked Audit Warning WFP extends Palantir contract amid privacy audit concerns; FBI seeks predictive AI watch lists; wearables lack transparency.
  26. LAPD urged to drop Flock; SEC bought airline records Los Angeles mayor wants LAPD to cut ties with Flock Safety, while SEC documents reveal warrantless purchase of over a billion airline ticket records.
  27. Apple Private Relay leak exposes real IPs; TikTok loses UK appeal Apple investigates Private Relay IP leak; TikTok loses £12.7m child privacy appeal; Walmart sued over voiceprints; officer charged over camera misuse.
  28. Apple Fights UK Encrypted Data Order; Court Clears Photos Faceprint Suit Apple challenges a second UK data demand, a Snapchat joke lands a teacher in jail, and a 32-billion-dollar faceprint class action moves forward.
  29. Apple fights UK iCloud order; Flock misreads 71% of alerts Apple challenges UK's second encryption order, Flock's plate readers fail in Roseville, UK police data leaked, Proton VPN rebuilds.
  30. Privacy Watch: Ring's Warrantless Disclosures, AI Data Traps, and Quantum Threats Amazon admits warrantless Ring footage sharing, AI tools raise student privacy risks, and quantum computing looms over Bitcoin.