Privacy Awareness Week 2026: What Privacy 108 is Doing
Privacy Awareness Week (PAW) is almost on us – this yea... ...
Australian Signals Directorate and Australian Cyber Security Centre issued joint guidance for assisting organisations adopting agentic AI solutions. The guidance is geared toward the public sector, critical infrastructure IT systems and industry stakeholders to understand the key security challenges and risks posed by agentic AI, as well as for organizations that design, develop, deploy and operate agentic AI systems to make informed risk assessments and mitigations. The ASD and ACSC recommend adopting agentic AI “incrementally,” while also “limiting them to low-risk tasks.” More here.
Experts at the International Monetary Fund (IMF) see the rapid development of AI-powered cyberattack tools as a growing threat to the global financial system. Central to their analysis is, among other things, the AI model Claude Mythos Preview from the company Anthropic, whose controlled release the analysts regard as a warning signal. More here.
The Wall Street Journal reports on how Anthropic’s Claude Mythos model is pushing U.S. President Donald Trump’s administration to increase AI safety considerations instead of focusing on innovation and global leadership. Vice President JD Vance recently urged major AI developers to work together to combat safety and security concerns Mythos’ cybersecurity vulnerability detection capabilities have raised. The White House is also considering executive actions to establish more government oversight of advanced AI systems before they are sent to market. More here (paywall).
Against the backdrop of uncertainty in the EU over gaining access to Anthropic’s Claude Mythos AI model, OpenAI has offered the European Commission access to its latest AI model that purports to similarly be able to discover cybersecurity vulnerabilities. During a 6 May hearing before European Parliament’s Committee on the Internal Market and Consumer Protection officials from the European Commission, the EU AI Office and the European Union Agency for Cybersecurity discussed the cyber risks posed by frontier AI models, as well as the opportunities to harness them for defensive purposes. More here.
An investigation by Canada’s Office of the Privacy Commissioner and provincial privacy authorities from Alberta, British Columbia and Quebec found OpenAI’s AI data training practices allegedly violated the relevant federal and provincial privacy statutes, including the Personal Information Protection and Electronic Documents Act. The probe found alleged shortcomings related to OpenAI’s data collection and consent practices, as well as issues around data subject access requests. More here.
The agreed amendments to the AI Act discussed above include an explicit ban on so-called nudifier apps that depict an identifiable person’s intimate parts or show them engaged in sexually explicit activities, or that generate child sexual abuse material. That ban will come into force on Dec. 2. The European Commission is already investigating Elon Musk’s X and Grok AI over such things under a separate regulation – here. More here.
Gov. Kim Reynolds, R-Iowa, signed Iowa Senate File 2417, a law aiming to bolster protections for minors under age 18 when interacting with AI chatbots. The law, which takes effect 1 July 2027, requires AI chatbot providers to remind underage users that a bot is not human and implement safeguards to prevent tools from engaging in conversations that could be considered inappropriate or harmful. The law also provides for attorney general rulemaking and civil penalties of up to USD1,000 per violation. More here.
The US National Institute of Standards and Technology’s Center for AI Standards and Innovation and the UK AI Security Institute each announced new partnerships with major AI developers that will allow “pre-deployment evaluations and targeted research” of frontier models with the aim to ensure model security and safety. CAISI entered into agreements with Google DeepMind, Microsoft and xAI, while the U.K. AISI secured a deal with Microsoft. More here.
In an interview with Reuters, European Securities and Markets Authority Chair Verena Ross said the risk and speed of cyberattacks powered by AI are growing. Ross said her office has made a push to contact financial institutions to assess the resiliency of their cyber defenses amid advances in AI. “We collectively between the national and the EU level need to up our game to try to ensure that we have the capability to properly look at what financial entities are doing in this space,” Ross said. “We also build up our expertise so that we can oversee the critical third-party providers.” More here.
India’s Ministry of Electronics and Information Technology proposed adding stricter rules surrounding the labeling of AI-generated content, The Economic Times reports. The proposed regulation would amend the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules and require all AI-generated content to be labeled as such throughout the entire duration of its display. More here.
How to audit what ChatGPT knows about you – and reclaim your data privacy | ZDNET
"*" indicates required fields
"*" indicates required fields
Privacy 108 collects your name and email to send you our newsletter. If you do not provide this information, we will be unable to send it to you. We may use third-party service providers (such as email marketing platforms) to distribute our communications. Some providers may store information overseas, including in the United States. For more information about how we handle your personal information, including how to access or correct it or make a complaint, please see our Privacy Policy or contact us at hello@privacy108.com.au. You can unsubscribe at any time using the link in our emails or by contacting hello@privacy108.com.au.