Data & AI Governance

Citizen Lab has uncovered sophisticated global surveillance campaigns that leverage vulnerabilities in mobile signalling protocols like SS7 and Diameter. These actors use customized tools to spoof operator identities and manipulate network traffic to track high-profile targets worldwide.

Microsoft's new architecture shifts AI governance from mere policy-making to real-time runtime enforcement and auditing. It utilizes tools like the Foundry AI Gateway to ensure that AI agents and models adhere to security and operational constraints during production.

This article details the use of administrative subpoenas by ICE to unmask individuals criticizing government immigration enforcement. It provides a specific list of targeted users and companies, noting instances where legal challenges led to withdrawn subpoenas.

To comply with new EU regulations, leading AI developers are integrating advanced statistical watermarking and cryptographic metadata into their model outputs. This shift has triggered an immediate technical arms race between compliance enforcement and open-source tools designed to strip these identifiers.

New Jersey's newly signed NJAADC law introduces sweeping regulations for online services to protect children and minors from harmful digital design. The legislation mandates high-privacy default settings and prohibits manipulative practices like dark patterns and compulsive design.

As global AI regulations diverge across borders and states, organizations face significant legal uncertainty. The author suggests that implementing robust internal governance frameworks can transform this regulatory challenge into a competitive advantage by fostering trust and operational efficiency.

The EU's proposed CADA legislation marks a transition from purely risk-based regulation to an 'AI promotion' strategy. It aims to foster technological sovereignty by investing in infrastructure, data availability, and specialized AI leadership initiatives.

The EU AI Act implementation timeline has been significantly delayed by the new AI Omnibus to reduce administrative burdens. Key changes include extended deadlines for high-risk systems and expanded regulatory powers for the AI Office.

The article examines how California and Brazil are leading the way in regulating social media and AI to protect minors from digital harms. It contrasts US legislative struggles with more comprehensive international approaches like Brazil's ECA Digital.

The text argues that European digital sovereignty is being hollowed out by the legal reach of the US CLOUD Act and the aggressive lobbying of American hyperscalers. It details how strategic acquisitions and legislative influence are bringing essential European infrastructure under US jurisdiction.