Privacy Tech News Today

The latest edition of the Seriously Risky Business cybersecurity newsletter, now published on Lawfare, advocates for a strict ban on the commercial sale of precise geolocation data. The piece highlights the significant privacy and national security threats posed when data brokers sell highly accurate location tracking information to potentially malicious actors.

Darkbloom is a new platform that routes encrypted AI inference to idle, hardware-verified Apple Silicon Macs. It provides users with comparable model performance at approximately 50% lower costs than traditional API providers. The hardware-verified encryption ensures strict, operator-blind privacy for all processed data.

A New York federal court has ruled that conversations with AI chatbots do not qualify for attorney-client privilege because sharing data with a third-party service eliminates the expectation of confidentiality. The decision relied on the terms of service to classify the interactions as discoverable personal notes rather than protected legal communications. This ruling highlights the growing legal gap between consumer expectations of digital privacy and the realities of using artificial intelligence tools.

A California resident invoked the state's Consumer Privacy Act to demand that surveillance company Flock delete all personal and vehicle data from its databases. The individual formally revoked consent for the company to collect their information in the future. Flock has since responded to the privacy inquiry.

Fiverr is facing severe criticism after a security flaw left sensitive customer files, including tax returns and Social Security numbers, publicly searchable via Google for nearly a week. Although the company claimed the documents were uploaded with explicit user consent as work samples, affected users dispute this and stress the severe privacy risks posed to vulnerable individuals using the platform. The leaked files were recently blocked by the hosting provider, but the prolonged exposure has sparked widespread outrage over the marketplace's data protection practices.

Spain plans to expand dynamic internet blocking during live sports and movie broadcasts to combat piracy, a strategy critics argue causes collateral damage by inadvertently restricting access to legitimate websites. In response to these aggressive measures and the sports industry pushing to ban consumer VPNs, digital rights advocates are calling for stricter EU-level intervention. They argue that broad IP-based restrictions violate net neutrality principles and set a dangerous precedent for internet freedom and user privacy across the European Union.

A developer has created "Still Kicking," a camera-free smart picture frame that uses mmWave sensors to monitor an elderly person's motion, detect falls, and track sleep quality. Following the project's announcement on Hacker News, elder care professionals and physicians strongly encouraged the creator to commercialize the device, noting that such privacy-focused technology could help seniors age in place safely without the intrusion of cameras or wearable pendants.

Michigan lawmakers withdrew proposed digital age legislation following backlash over its handling of consumer data privacy. Critics argued the bills relied on flawed opt-out mechanisms rather than requiring strict opt-in permission for data sales. The controversy highlights broader frustrations with tech companies using delayed consent models to harvest user data for AI training without explicit approval.