Tag
Investigation reveals WhatsApp hid invisible AI-directed instructions in its help pages, telling AI assistants not to recommend data protection regulators or cite GDPR once a user mentioned a lawyer, contradicting its own published privacy policy.
Calenteri 是一款在 Product Hunt 上发布的 SaaS 预约工具，主打 GDPR 合规、欧盟托管且无第三方追踪器，作为 Calendly 的隐私友好替代方案，支持用户间互订日程并邮件通知。
Spain’s data protection agency logged its first breach report where an autonomous AI agent performed the hacking, underscoring the shift from theoretical to real AI threats and prompting discussions on agent permission scoping.
The article argues that GDPR is a successful regulation by highlighting how it is hated by tech companies, which it sees as evidence of its effectiveness in protecting user privacy and challenging surveillance practices.
2BA.AI provides EU-hosted AI infrastructure with a flat €20/month fee, offering 4,500 requests per 5-hour window and integration with tools like Cursor and VS Code while ensuring GDPR compliance.
This paper proposes CallosumNet, a biologically inspired framework for efficient unlearning in spatio-temporal graphs to comply with privacy regulations like GDPR, achieving complete unlearning with minimal accuracy loss.
Famulor launched on Product Hunt as an AI voice agent platform that answers phone calls, runs campaigns, and follows up with customers via WhatsApp. The service is GDPR-ready and hosted in the EU, with a free tier available.
The article explores the challenges of updating personal identity information in git commit histories due to life events and proposes using ATProto to manage distributed identity for better privacy and compliance.
Chinese open-weight AI models like Qwen and DeepSeek are gaining traction in Europe, particularly by companies such as Siemens, to bypass GDPR data transfer issues by self-hosting, offering an alternative to proprietary foreign APIs.
A systematic review of XAI research in the context of the EU Right to Explanation, analyzing gaps between legal requirements and technical implementations across GDPR and the AI Act.
The author argues that AI agent recall is largely solved but permission/authorization over retrieved memories is the missing layer, introducing Provem, an open-source governance layer between agents and memory stores with benchmarks showing it eliminates compliance violations.
Animam is a multi-tenant AI agent platform that lets agencies deploy personalized AI agents for clients via widget, API, voice, and MCP. The builder seeks feedback on its infrastructure approach from production users.
A travel agent's AI chatbot violated GDPR regulations without any user prompt, raising concerns about data protection compliance in AI applications.
Analysis of LLM usage in legal and compliance tasks reveals that models often produce confident but unverifiable citations, raising questions about reliable legal grounding for AI outputs.
A privacy advocate's complaint about Elkjop's forced consent for marketing led to a €1.8 million fine after five years, highlighting GDPR violations.
Google's AI strategy is criticized as a surveillance-based profiling engine that forces users into consent through mandatory login, circumventing GDPR. The article exposes Google's plan to replace traditional search with AI-generated answers and personalized tracking, calling it a legal loophole wrapped in AI hype.
The author built a Claude skill for automated PII detection during development, translating existing compliance knowledge into a tool that checks for regulations like CCPA and HIPAA. They plan to release more compliance-focused skills in the near future.
A Dutch suicide prevention hotline was found to share sensitive visitor metadata with Google and Microsoft without proper consent, leading to the suspension of tracking tools and potential GDPR violations.
The author details their personal migration of digital infrastructure to European and Swiss-based services like Proton and Matomo to enhance data sovereignty and privacy.
A researcher discovered that deleteduser.com was being used as a placeholder domain by multiple companies to overwrite user email addresses during data deletion compliance, and after acquiring the domain, received PII from 30+ organizations including gyms, hotels, energy companies, and cybersecurity firms.