Jed Bracy
@jedbracy.bsky.social
IAPP Editorial Director
Host of The Privacy Advisor Podcast
https://iapp.org/news/privacy-advisor-podcast/
My opinions here, not the IAPP’s.
Host of The Privacy Advisor Podcast
https://iapp.org/news/privacy-advisor-podcast/
My opinions here, not the IAPP’s.
Reposted by Jed Bracy
Politico is reporting that the breach at the Congressional Budget Office is "ongoing."
“Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.
“Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.
Cybersecurity breach at Congressional Budget Office remains a live threat
Library of Congress employees were informed to take caution when emailing the office of the congressional scorekeeper.
www.politico.com
November 10, 2025 at 9:40 PM
Politico is reporting that the breach at the Congressional Budget Office is "ongoing."
“Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.
“Do NOT click on any links in emails from CBO. Do NOT share sensitive information with CBO colleagues over email, Microsoft Teams, or Zoom at this time,” the email to CBO staff reads.
Reposted by Jed Bracy
Would you like to work on LinkedIn? InfoSec is hiring! We have both manager and IC roles -- and more coming.
I'm here because I want to help protect people and not work with jerks. If that's what you like, then I hope you'll join us.
Jobs in 🧵
I'm here because I want to help protect people and not work with jerks. If that's what you like, then I hope you'll join us.
Jobs in 🧵
November 5, 2025 at 11:27 PM
Would you like to work on LinkedIn? InfoSec is hiring! We have both manager and IC roles -- and more coming.
I'm here because I want to help protect people and not work with jerks. If that's what you like, then I hope you'll join us.
Jobs in 🧵
I'm here because I want to help protect people and not work with jerks. If that's what you like, then I hope you'll join us.
Jobs in 🧵
Reposted by Jed Bracy
LEAK: I got my hands on the digital omnibus on AI. Some key takeaways:
▶️ Centralized enforcement
▶️ Expanded regulatory privileges
▶️ Grace period for labelling
▶️ No AI literacy obligation on companies
Another must-read on @mlexclusive 👇
www.mlex.com/mlex/article...
▶️ Centralized enforcement
▶️ Expanded regulatory privileges
▶️ Grace period for labelling
▶️ No AI literacy obligation on companies
Another must-read on @mlexclusive 👇
www.mlex.com/mlex/article...
Planned EU AI Act changes to include centralized enforcement, regulatory tweaks | MLex | Specialist news and analysis on legal risk and regulation
Amendments to the EU's AI Act to be proposed on Nov. 19 look to include easing compliance burdens and centralizing enforcement through the European Commission's AI Office. An early draft, obtained by ...
www.mlex.com
November 6, 2025 at 10:27 AM
LEAK: I got my hands on the digital omnibus on AI. Some key takeaways:
▶️ Centralized enforcement
▶️ Expanded regulatory privileges
▶️ Grace period for labelling
▶️ No AI literacy obligation on companies
Another must-read on @mlexclusive 👇
www.mlex.com/mlex/article...
▶️ Centralized enforcement
▶️ Expanded regulatory privileges
▶️ Grace period for labelling
▶️ No AI literacy obligation on companies
Another must-read on @mlexclusive 👇
www.mlex.com/mlex/article...
Reposted by Jed Bracy
Does the EU AI Act apply to AI agents? The Commission’s initial views seem to suggest AI agents might not always qualify as an AI system. MEP Lagodinsky asked the Commission to clarify its position and warned about a potential misalignment.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
EU Commission’s preliminary views on AI agents raise legal applicability question | MLex | Specialist news and analysis on legal risk and regulation
EU digital chief Henna Virkkunen shared the European Commission’s initial views, prompting questions on whether AI agents always qualify as AI systems under the AI Act. Lawmaker Sergey Lagodinsky ask...
www.mlex.com
November 5, 2025 at 11:12 AM
Does the EU AI Act apply to AI agents? The Commission’s initial views seem to suggest AI agents might not always qualify as an AI system. MEP Lagodinsky asked the Commission to clarify its position and warned about a potential misalignment.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
Reposted by Jed Bracy
The law firm that has represented data broker Kochava in its 3-year legal battle with the FTC over privacy is seeking to withdraw due to "serious and irreparable breakdown in communication."
prior: www.mediapost.com/publications...
prior: www.mediapost.com/publications...
October 29, 2025 at 4:51 PM
The law firm that has represented data broker Kochava in its 3-year legal battle with the FTC over privacy is seeking to withdraw due to "serious and irreparable breakdown in communication."
prior: www.mediapost.com/publications...
prior: www.mediapost.com/publications...
Reposted by Jed Bracy
“In order to protect fundamental rights, maintain legal certainty, and continue to ensure a high level of protection, any reform should be evidence-based, targeted, transparent, and further the EU’s values” (Christopher Kuner in this new FPF guest post)
#GDPR #Draghi
fpf.org/blog/the-dra...
#GDPR #Draghi
fpf.org/blog/the-dra...
The Draghi Dilemma: The Right and the Wrong Way to Undertake GDPR Reform
There has been much interest in the report on European competitiveness issued in September 2024 by former Italian Prime Minister and European Central Bank President Mario Draghi at the request of Euro...
fpf.org
October 25, 2025 at 8:30 PM
“In order to protect fundamental rights, maintain legal certainty, and continue to ensure a high level of protection, any reform should be evidence-based, targeted, transparent, and further the EU’s values” (Christopher Kuner in this new FPF guest post)
#GDPR #Draghi
fpf.org/blog/the-dra...
#GDPR #Draghi
fpf.org/blog/the-dra...
Reposted by Jed Bracy
📢 NEW: EPIC published a new report today that examines how state Attorneys General are advancing privacy enforcement across the U.S. (2020–2024).
220+ cases. 35 letters. 20 investigations.
Read more: epic.org/state-ag-pri...
220+ cases. 35 letters. 20 investigations.
Read more: epic.org/state-ag-pri...
State Attorneys General & Privacy: Enforcement Trends, 2020-2024
epic.org
October 22, 2025 at 1:45 PM
📢 NEW: EPIC published a new report today that examines how state Attorneys General are advancing privacy enforcement across the U.S. (2020–2024).
220+ cases. 35 letters. 20 investigations.
Read more: epic.org/state-ag-pri...
220+ cases. 35 letters. 20 investigations.
Read more: epic.org/state-ag-pri...
Reposted by Jed Bracy
Big #AI regulatory proposal from the UK Government, but not in the way many people think of regulation.
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
AI Growth Lab
www.gov.uk
October 22, 2025 at 9:13 AM
Big #AI regulatory proposal from the UK Government, but not in the way many people think of regulation.
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
This proposal is almost exclusively focused on facilitating responsible AI development through sandboxes, but with a twist…
www.gov.uk/government/c...
Reposted by Jed Bracy
🔔 Public records-based reporting should be free. @404media.co and @wired.com are leading the way.
Hear why this is a public service and good for business, ft. @josephcox.bsky.social, @katie-drummond.bsky.social, Caitlin Vogus, and Lauren Harper.
🗓️ Oct. 29, 2 pm EDT
RSVP: freedom.press/unpaywalled
Hear why this is a public service and good for business, ft. @josephcox.bsky.social, @katie-drummond.bsky.social, Caitlin Vogus, and Lauren Harper.
🗓️ Oct. 29, 2 pm EDT
RSVP: freedom.press/unpaywalled
October 20, 2025 at 8:05 PM
🔔 Public records-based reporting should be free. @404media.co and @wired.com are leading the way.
Hear why this is a public service and good for business, ft. @josephcox.bsky.social, @katie-drummond.bsky.social, Caitlin Vogus, and Lauren Harper.
🗓️ Oct. 29, 2 pm EDT
RSVP: freedom.press/unpaywalled
Hear why this is a public service and good for business, ft. @josephcox.bsky.social, @katie-drummond.bsky.social, Caitlin Vogus, and Lauren Harper.
🗓️ Oct. 29, 2 pm EDT
RSVP: freedom.press/unpaywalled
Reposted by Jed Bracy
MEPs are preparing to call for EU copyright rules to apply to all generative AI systems placed on the EU market, even if trained abroad. A new compromise backs making respect of EU copyright law a market entry requirement under the AI Act.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
Generative AI developers to see EU lawmakers call for extraterritorial copyright | MLex | Specialist news and analysis on legal risk and regulation
EU lawmakers are preparing to call for EU copyright laws to apply extraterritorially to generative AI systems, meaning AI models trained outside the bloc would still need to comply with EU copyright r...
www.mlex.com
October 20, 2025 at 12:14 PM
MEPs are preparing to call for EU copyright rules to apply to all generative AI systems placed on the EU market, even if trained abroad. A new compromise backs making respect of EU copyright law a market entry requirement under the AI Act.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
Reposted by Jed Bracy
When people warn about the privacy and security risks of mandating digital age verification, this is exactly what they mean. It’s not hypothetical www.bbc.com/news/article...
October 9, 2025 at 5:09 PM
When people warn about the privacy and security risks of mandating digital age verification, this is exactly what they mean. It’s not hypothetical www.bbc.com/news/article...
Reposted by Jed Bracy
The Netherlands weighs in on the EU’s digital simplification agenda. Key message: focus on legal clarity, not deregulation. It also calls for streamlined governance of EU boards and, on the AI Act, urges simplification over delays.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
EU digital laws overhaul must prioritize legal clarity, Dutch government warns | MLex | Specialist news and analysis on legal risk and regulation
A planned overhaul of EU digital legislation must focus on legal clarity and coherence, the Dutch government is urging the European Commission. In a document shared with other governments, it calls fo...
www.mlex.com
October 9, 2025 at 8:50 AM
The Netherlands weighs in on the EU’s digital simplification agenda. Key message: focus on legal clarity, not deregulation. It also calls for streamlined governance of EU boards and, on the AI Act, urges simplification over delays.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
Reposted by Jed Bracy
Governor Gavin Newsom signed AB 566, requiring all browsers to offer a setting that sends an OOPS signal, letting Californians opt out of third-party data sales as per CPPA.
www.gov.ca.gov/2025/10/08/g...
www.gov.ca.gov/2025/10/08/g...
Governor Newsom signs data privacy bills to protect tech users | Governor of California
www.gov.ca.gov
October 8, 2025 at 7:34 PM
Governor Gavin Newsom signed AB 566, requiring all browsers to offer a setting that sends an OOPS signal, letting Californians opt out of third-party data sales as per CPPA.
www.gov.ca.gov/2025/10/08/g...
www.gov.ca.gov/2025/10/08/g...
Reposted by Jed Bracy
The Commission has launched a tool crafted to help stakeholders determine whether they are subject to legal obligations and understand the steps they need to take to comply. ai-act-service-desk.ec.europa.eu/en
AI Act Single Information Platform | AI Act Service Desk
ai-act-service-desk.ec.europa.eu
October 8, 2025 at 10:06 AM
The Commission has launched a tool crafted to help stakeholders determine whether they are subject to legal obligations and understand the steps they need to take to comply. ai-act-service-desk.ec.europa.eu/en
Reposted by Jed Bracy
Digital sovereignty is on the agenda of the next European Council summit. Draft conclusions seen by MLex show EU leaders set to reaffirm the bloc’s regulatory autonomy and urge lawmakers to fast-track files related to simplification.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
EU leaders set to discuss competitiveness at October summit | MLex | Specialist news and analysis on legal risk and regulation
MLex Summary: EU governments and heads of states are planning an "in-depth discussion on bolstering the Union’s competitiveness" at their summit planned for Oct. 23 and 24, according to a preparatory ...
www.mlex.com
October 8, 2025 at 10:10 AM
Digital sovereignty is on the agenda of the next European Council summit. Draft conclusions seen by MLex show EU leaders set to reaffirm the bloc’s regulatory autonomy and urge lawmakers to fast-track files related to simplification.
www.mlex.com/mlex/article...
www.mlex.com/mlex/article...
Reposted by Jed Bracy
Meta and Apple "are in the final stages of agreeing a deal with European regulators to change a range of business practices after being fined a total of €700mn in April for breaching the EU’s landmark Digital Markets Act, according to officials briefed on the discussions."
Meta and Apple close to settling EU cases
US Big Tech groups in final stages of agreeing deal with Brussels to avoid series of escalating fines
www.ft.com
October 8, 2025 at 11:11 AM
Meta and Apple "are in the final stages of agreeing a deal with European regulators to change a range of business practices after being fined a total of €700mn in April for breaching the EU’s landmark Digital Markets Act, according to officials briefed on the discussions."
Reposted by Jed Bracy
The decision from DPC on TikTok’s transfers of EEA User Data to China was just published! See linkedin.com/posts/luisalbe….
October 2, 2025 at 12:39 PM
The decision from DPC on TikTok’s transfers of EEA User Data to China was just published! See linkedin.com/posts/luisalbe….
Reposted by Jed Bracy
The Commission has just published a draft guidance and a template for serious incident reporting under the EU AI Act, together with a public consultation open until November 7.
digital-strategy.ec.europa.eu/en/consultat...
digital-strategy.ec.europa.eu/en/consultat...
AI Act: Commission issues draft guidance and reporting template on serious AI incidents, and seeks stakeholders' feedback
Stakeholders are encouraged to provide feedback and examples on the interplay with other reporting regimes in this public consultation.
digital-strategy.ec.europa.eu
September 26, 2025 at 2:49 PM
The Commission has just published a draft guidance and a template for serious incident reporting under the EU AI Act, together with a public consultation open until November 7.
digital-strategy.ec.europa.eu/en/consultat...
digital-strategy.ec.europa.eu/en/consultat...
Reposted by Jed Bracy
Shaped by years of public input, California Finalizes Major New Privacy Rules! The CPPA has approved new regs on: - Cybersecurity audits - Risk assessments - ADMT - Insurance - CCPA updates 🗓️ Effective 1/1/26 Final docs coming soon to the CPPA website. Read more: cppa.ca.gov/announcement...
California Finalizes Regulations to Strengthen Consumers' Privacy
cppa.ca.gov
September 23, 2025 at 4:29 PM
Shaped by years of public input, California Finalizes Major New Privacy Rules! The CPPA has approved new regs on: - Cybersecurity audits - Risk assessments - ADMT - Insurance - CCPA updates 🗓️ Effective 1/1/26 Final docs coming soon to the CPPA website. Read more: cppa.ca.gov/announcement...
Reposted by Jed Bracy
JUST IN: A federal judge in Illinois has thrown out the Trump administration's lawsuit against the state that claims IL's workforce privacy law conflicts with federal immigration enforcement. storage.courtlistener.com/recap/gov.us...
August 19, 2025 at 11:49 PM
JUST IN: A federal judge in Illinois has thrown out the Trump administration's lawsuit against the state that claims IL's workforce privacy law conflicts with federal immigration enforcement. storage.courtlistener.com/recap/gov.us...
Reposted by Jed Bracy
NEWS: Meta will announce an AI reorganization today, dividing the Superintelligence division into four units
weighing some cuts or employees moved from AI division
considering licensing closed source models to build new AI products
w/ @elitan.bsky.social
www.nytimes.com/2025/08/19/t...
weighing some cuts or employees moved from AI division
considering licensing closed source models to build new AI products
w/ @elitan.bsky.social
www.nytimes.com/2025/08/19/t...
Mark Zuckerberg Plans to Shake Up Meta’s A.I. Efforts, Again
www.nytimes.com
August 19, 2025 at 5:09 PM
NEWS: Meta will announce an AI reorganization today, dividing the Superintelligence division into four units
weighing some cuts or employees moved from AI division
considering licensing closed source models to build new AI products
w/ @elitan.bsky.social
www.nytimes.com/2025/08/19/t...
weighing some cuts or employees moved from AI division
considering licensing closed source models to build new AI products
w/ @elitan.bsky.social
www.nytimes.com/2025/08/19/t...
Reposted by Jed Bracy
🎙️PODCAST: Earlier this year, I sat down with @sbolinger.bsky.social to discuss his new documentary, "Privacy People," which tells the story of the rise of the privacy profession. In his exhaustive work, he traveled around the word to interview AND film leaders in the space: iapp.org/news/a/behin...
August 15, 2025 at 3:59 PM
🎙️PODCAST: Earlier this year, I sat down with @sbolinger.bsky.social to discuss his new documentary, "Privacy People," which tells the story of the rise of the privacy profession. In his exhaustive work, he traveled around the word to interview AND film leaders in the space: iapp.org/news/a/behin...
🎙️PODCAST: Earlier this year, I sat down with @sbolinger.bsky.social to discuss his new documentary, "Privacy People," which tells the story of the rise of the privacy profession. In his exhaustive work, he traveled around the word to interview AND film leaders in the space: iapp.org/news/a/behin...
August 15, 2025 at 3:59 PM
🎙️PODCAST: Earlier this year, I sat down with @sbolinger.bsky.social to discuss his new documentary, "Privacy People," which tells the story of the rise of the privacy profession. In his exhaustive work, he traveled around the word to interview AND film leaders in the space: iapp.org/news/a/behin...
Reposted by Jed Bracy
The Office of the Privacy Commissioner, New Zealand just issued a Biometric Processing Privacy Code that will create specific privacy rules for agencies (businesses and organisations) using biometrics and give New Zealanders confidence about the use of their sensitive personal information.
August 5, 2025 at 9:58 PM
The Office of the Privacy Commissioner, New Zealand just issued a Biometric Processing Privacy Code that will create specific privacy rules for agencies (businesses and organisations) using biometrics and give New Zealanders confidence about the use of their sensitive personal information.
Reposted by Jed Bracy
New: A few weeks ago, when my father-in-law died, the funeral home asked if we wanted to use AI to write his obituary. So I dug into it and found that it's the biggest new trend in "death care." Tens of thousands of AI obits have been made already. Often the families don't even know wapo.st/4okuxIg
The rise of AI tools that write about you when you die
Families and funeral directors are using AI obituary generators to more efficiently memorialize the dead. What happens when they get it wrong?
wapo.st
August 3, 2025 at 11:47 AM
New: A few weeks ago, when my father-in-law died, the funeral home asked if we wanted to use AI to write his obituary. So I dug into it and found that it's the biggest new trend in "death care." Tens of thousands of AI obits have been made already. Often the families don't even know wapo.st/4okuxIg