Privacy Regulation Tech News Today

Mozilla has urged UK regulators to recognize VPNs as essential tools for protecting online privacy and security. The company made its case to the Department for Science, Innovation and Technology during ongoing consultations regarding digital safety measures for young people.

Privacy-focused VPN provider Mullvad is addressing a vulnerability where its exit IP addresses were predictably assigned, making users identifiable. The company is rolling out a fix that scrambles exit IP positions based on user public keys to resolve the tracking issue. This update preserves Mullvad's strategy of utilizing multiple exit IPs per server to prevent strict website rate limits and IP blocks.

The Open Vehicle Monitoring System project is gaining traction as electric vehicle owners seek to bypass restrictive OEM CAN gateway modules that limit standard OBD-II ports to read-only access. While manufacturers claim these lockouts improve security, critics argue they are primarily designed to monetize telemetry data and force users into proprietary software subscriptions. Consequently, drivers are increasingly turning to open-source tools and hardware workarounds to regain full diagnostic control and privacy for their vehicles.

A vehicle owner physically removed the modem and GPS from their 2024 RAV4 Hybrid to prevent the car from transmitting continuous personal telemetry. This DIY privacy modification highlights growing consumer pushback against modern vehicles functioning as rolling data trackers.

The Canadian government has introduced Bill C-22, a new surveillance proposal also known as the Lawful Access Act. This legislation is a repackaged version of last year's Bill C-2, which was abandoned after facing intense backlash from the privacy community for threatening digital rights under the pretext of border security.

Google has introduced a new verification step for Gmail registration that requires users to send a text message. To create an account, users must now scan a QR code with their smartphone, which automatically triggers an SMS to Google to verify their phone number.

A new guitar tuner application uses a smartphone's accelerometer to detect physical vibrations and determine musical pitch. However, readers warn that this technique poses significant privacy and security risks, as the sensor could potentially be exploited to eavesdrop on surrounding sounds or capture keystrokes without requiring explicit microphone permissions.

AI meeting note-takers are raising legal concerns by potentially voiding attorney-client privilege and turning casual conversations into discoverable permanent records. Beyond these privacy risks, users report that the tools frequently produce highly inaccurate transcripts when handling poor audio quality. This inaccuracy stems from the underlying language models confidently hallucinating missed words based on context rather than acknowledging audio uncertainties.

The tech industry is increasingly advocating for a shift toward running artificial intelligence directly on user devices rather than relying on remote cloud servers. By establishing local AI models as the standard default, the ecosystem can significantly improve system performance and enhance overall data privacy for end users.

After a seven-year hiatus, the lead developer of the privacy-focused operating system Qubes OS has resurfaced with a new blog. The creator of the highly secure system, which they began developing in 2009, announced their return to reconnect with the tech community.

GrapheneOS has released an update to patch an Android VPN bypass flaw capable of leaking a user's real IP address. This fix addresses a vulnerability that Google previously declined to patch, ensuring users of the privacy-focused operating system are now protected.

Google's reCAPTCHA system now requires users to run the company's proprietary software to prove they are human. Consequently, privacy-focused individuals using de-googled versions of Android are being incorrectly flagged as bots and blocked from accessing websites.

A new interactive web page demonstrates the extensive amount of data browsers automatically share with websites by default. It instantly reveals this hidden information to users without requiring any input or permissions, highlighting significant privacy and tracking vulnerabilities.

Google has removed a privacy statement from the Chrome browser assuring users that its on-device AI features do not send data to company servers. This retraction has prompted immediate privacy concerns regarding how local AI interactions might still be transmitting user information to the cloud.

Researchers have developed SoundOff, a novel smart home sensing system that utilizes low-cost, passive ultrasound tags for environmental monitoring. This technology enables non-invasive and non-intrusive tracking without relying on traditional cameras or active wearables. By leveraging ultrasound, the system provides an affordable and privacy-preserving solution for everyday home automation.

The StarFighter 16-inch is a new high-performance Linux laptop designed with a strong emphasis on user security and privacy. It is powered by either Intel Core Ultra or AMD Ryzen processors and features a 4K 120Hz display option. To further protect user data, the device utilizes coreboot firmware alongside hardware-backed disk encryption and physical privacy controls.

Google Chrome is silently downloading a 4 GB Gemini Nano AI model onto users' devices without consent, automatically re-downloading the file if it is manually deleted. A new article examines the legal and environmental implications of this practice, noting its massive scale and complete lack of user opt-out mechanisms.

A newly proposed standard introduces the DO_NOT_TRACK environment variable to help users opt out of telemetry, analytics, and tracking. This privacy-focused initiative is specifically designed for command-line and text-based user interface applications.

An author explores how the Opus 4.7 AI model can accurately identify her using just 150 words of text. The piece examines the broader implications of this advanced personal recognition capability and what it means for everyday digital privacy.

Dunwoody, Georgia residents are furious after learning that surveillance firm Flock accessed cameras inside a children's gymnastics room during a sales demonstration. The privacy breach has sparked intense backlash against the city's surveillance contract, prompting citizens to question whether local elected officials actually care about the incident.