OpenAI is facing an investigation from state attorneys general, according to TechCrunch. The article says it is not yet clear which states are involved. Reported areas of inquiry include OpenAI's advertising policies and how the company handles health-related data, suggesting regulators are examining both consumer-facing business practices and sensitive information governance.
Google has notified users via email that it will begin saving multimedia inputs—images from Google Lens, real-time recordings from Search Live, and audio from Translate—under a new 'Search Services History' setting. This data will be retained and potentially used to train and improve Google's AI models. Users concerned about privacy should review their account settings to manage or disable this data collection.
Apple's AI assistant has gained the ability to change account passwords on behalf of users, raising eyebrows in the security community. The author uses pointed sarcasm to question whether delegating password management to an AI system is wise. This development reflects a broader trend of AI agents gaining deeper OS-level permissions, blurring the line between helpful automation and dangerous over-trust.
Anthropic says Mythos-class models require limited prompt and output retention for trust and safety work across platforms where they are offered. The policy took effect on June 9, 2026 and mainly affects organizations using Zero Data Retention through Claude Console, Claude Code Enterprise, AWS Bedrock, Google Cloud Agent Platform, or Microsoft Foundry. Consumer Claude Free, Pro, and Max plans are unchanged, while Anthropic describes restricted human review and automatic deletion after 30 days.
The FCC is proposing rules that would require telecom carriers to verify the identity of every customer before activating service. This move would eliminate anonymous prepaid 'burner phones,' long used by journalists, domestic abuse survivors, and privacy-conscious individuals. Critics warn the policy could undermine digital privacy and disproportionately harm vulnerable populations, while proponents argue it would curb fraud and criminal activity.
A Reddit user warns that OpenCode Go/Zen provides no mechanism for users to delete their account or personal data. Several GitHub issues have been filed but mostly ignored; one official response only said deletion would 'probably' be added eventually. For privacy-conscious developers, this is a significant red flag before signing up to the platform.
Apple kicked off its annual developer conference with bold AI promises centered around a revamped "Siri AI" and Apple Intelligence. While CEO Tim Cook touted these as boundary-pushing innovations, the announcements largely represent Apple playing catch-up in the generative AI race. The slow, phased rollout suggests Apple is still struggling to match the rapid pace of competitors like Microsoft and Google.
Apple clarified that running some of its AI models on Google's cloud infrastructure does not compromise user privacy. Through its Private Cloud Compute (PCC) architecture, Apple ensures that all data is processed in secure enclaves with end-to-end encryption. Consequently, Google has zero access to user data, addressing privacy concerns over Apple's cloud partnerships.
The Verge argues Apple’s WWDC 2026 AI strategy centers on privacy rather than raw capability. Apple says Siri AI and Apple Intelligence will run on-device when possible and use Private Cloud Compute only when needed. But reliance on Google Gemini, Google Cloud, Nvidia, Intel, and Google Titan hardware complicates Apple’s original privacy story, even if its default data collection remains more limited than rivals.
Include Security examines how Bright Data’s SDK supplies residential proxy capacity through partner apps on phones and connected TVs. The post argues smart TVs are especially attractive because they are always powered, often on fast Wi-Fi, and rarely monitored. It details public configuration endpoints, peer tunnel behavior, telemetry, VPN visibility bypasses, bandwidth limits, and practical DNS or network-blocking defenses.
A Privacy Guides community post says South Korean forums and online communities may be required to scan user-uploaded images and videos with AI under telecom-related rules. The post claims operators must provide their own hardware, including costly Nvidia GPUs. The debate centers on illegal sexual imagery and CSAM prevention, but also raises concerns about prior censorship, false positives, free expression, and burdens on small domestic communities.
Ars Technica reports that Elon Musk is again seeking to escape FTC audits over how X handles user data. Public commenters warned the FTC that Musk cannot be trusted to protect X users’ privacy. The story centers on platform governance, privacy oversight, and whether external audits should remain in place for X’s data practices.
Amazon faces a class action lawsuit over Ring's Familiar Faces feature. Filed in Seattle by Virginia resident Charles Sigwalt, the complaint claims the feature stores images of passersby without consent. The available excerpt does not state whether a court has certified the class, which laws are cited, or how Amazon has responded.
Google's new 24/7 AI agent, Gemini Spark, can take on tasks for users and continue working on them. After receiving access last week, The Verge's reviewer found that Spark can perform surprisingly well, roughly matching Google's demo. The remaining question is whether that capability justifies the financial cost and potential privacy tradeoffs.
A Hacker News post highlights DeFlock reaching 100,000 mapped automated license plate readers in the United States. The original article text was not provided, so the confirmed facts are limited mainly to the title and public context around DeFlock. The item is most relevant to privacy, computer-vision surveillance, civic mapping, and governance rather than new AI models or developer tooling.
TechCrunch frames 2026’s browser competition around alternatives to Chrome and Safari. The roundup covers AI-centric browsers like Perplexity Comet, Dia, Opera Neon, OpenAI Atlas, and Aside, alongside privacy-focused options such as Brave, DuckDuckGo, Ladybird, and Vivaldi. It also highlights niche products including Opera Air, SigmaOS, and Zen Browser, showing how browsers are becoming AI assistants, productivity hubs, privacy layers, and wellness-oriented tools.
Hugging Face published a tutorial for running Reachy Mini conversations without cloud audio processing or API keys. The setup uses its speech-to-speech library as a cascaded VAD, STT, LLM, and TTS pipeline exposed through a Realtime API-compatible WebSocket. Recommended defaults include llama.cpp with Gemma 4, Silero VAD, Parakeet-TDT, and Qwen3-TTS, while allowing swaps to vLLM, MLX, Transformers, or hosted Responses API providers.
This is a major privacy and security incident triggered by a breakthrough in AI technology. When the National Transportation Safety Board (NTSB) investigates…
In the current era of booming generative AI, one of the greatest challenges enterprises and developers face when adopting large language models (LLMs) is "data…
Vercel's official blog announced a major security and privacy upgrade for its AI Gateway product line: "Zero Data Retention (ZDR)." Vercel AI Gateway serves as…
Vercel has introduced new security and compliance features in its AI Gateway product: team-level "Zero Data Retention (ZDR)" and "No Prompt Training" controls…
In this issue of Import AI 438, Jack Clark examines two key issues concerning AI security and privacy: **1. You Are Your LLM History** As large language models…
This article introduces how to run privacy-preserving inference based on Fully Homomorphic Encryption (FHE) on Hugging Face Endpoints. In traditional…
In today's software development workflows, AI coding assistants have become a critical tool for boosting developer productivity. However, for many enterprises…
### Background and Enterprise Pain Points The widespread adoption of AI coding assistants like GitHub Copilot has significantly boosted developer productivity…
This blog post, co-authored by Hugging Face and Zama — a cryptography company specializing in Fully Homomorphic Encryption (FHE) — explores how to address a…
France's Commission Nationale de l'Informatique et des Libertés (CNIL — France's personal data protection authority) has announced that it has selected Hugging…
Vercel has officially announced that its web analytics tool, "Vercel Web Analytics," has exited Beta and is now Generally Available to all users. This tool…
As artificial intelligence advances rapidly, data privacy and regulatory compliance (such as GDPR) have become one of the greatest challenges for enterprises…
As privacy awareness grows and regulatory requirements tighten, training machine learning models without centralizing sensitive data has become a critical…