The guidelines cover machine learning, generative AI and AI agents, and require AI inventories, risk materiality assessments and senior management accountability, according to a contributed IAPP analysis.
The US bank regulator says examiners should not treat AI as a separate risk category and that scrutiny may be scaled to consequences, delegated authority and human oversight, not technical sophistication.
A federal judge in Washington granted a preliminary injunction and stayed the agencies' 'Voter Data Transmission Policy' on the eve of the midterms, after evidence the matched lists misidentified US citizens.
In comments on the EDPB's draft Guidelines 03/2026 on web scraping for generative AI, EPIC argues that most such scraping cannot meet the GDPR. It proposes a public registry of scrapers and an opt-in default for AI training.
A survey of 29 registered Dutch collection agencies found algorithmic tools in core processes, weak transparency and a narrow view of personal data. The AP says profiling such as file enrichment should stop.
The settlement requires affirmative express consent before GM collects or discloses driving and location data, plus data minimisation and a privacy programme subject to internal and external assessments.
The Investigatory Powers Commissioner says oversight is working but criticises GCHQ, the NCA, the prison service and the MoD, and records four serious errors linked to communications data.
The data observability vendor says Bayes discovers deployed agents, traces failures back to models and data pipelines, and can apply fixes autonomously within limits set by the customer.
At dbt Summit 2026, two AWS architects described routing agent queries through certified dbt metrics and read-only Redshift execution, rather than letting the model write its own SQL.
The agency used internal records and State Department and DHS data to fill gaps, but an advocacy group warns that errors in the DHS SAVE service could be copied into SSA files.