Government & Policy
Digital India, data laws and tech regulation.
EFF’s State Legislative Agenda to End ALPR Mass Surveillance
The EFF outlines its legislative agenda to restrict Automated License Plate Readers, which have evolved from local tools into a nationwide AI-powered surveillance network used for civil rights abuses.
Meta ordered to pay New Mexico $25 billion after jury finds it deceived Facebook users about privacy
Meta has been ordered to pay New Mexico $25 billion after a jury found the company liable for over 43 million violations of consumer protection laws related to Facebook user data harvesting by Cambridge Analytica.
eMudhra security incident: MeitY orders probe, says impact on Indian websites and apps was limited; details here
India's MeitY has ordered a probe into eMudhra's security breach involving eight compromised digital certificates, concluding impact on Indian websites and apps was limited and domestic digital signature services unaffected.
eMudhra Weak Link Tests India’s Chain Of Digital Trust
eMudhra's discovery of eight compromised intermediate CA certificates, including one with a weak private key, prompted browser makers to revoke trust, exposing vulnerabilities in India's role as a custodian of global digital infrastructure.
German court calls Google’s aerial imagery ‘spying’, Google will appeal
A German court ruled that Google's aerial imagery in Earth and Maps violates privacy laws, calling the practice 'spying,' and Google has announced an appeal.
EFF Launches Guide to Help Parents and Youth Protect Privacy Online
The Electronic Frontier Foundation published a guide to help parents and youth protect privacy online, amid concerns about government proposals that could compromise privacy and restrict young people's access to information.
MeitY sets up team to probe eMudhra certificate breach, says digital signature services unaffected
India's Ministry of Electronics and Information Technology investigates a certificate flaw at eMudhra after Google and Mozilla blocked affected certificates, though digital signature services remain operational.
Special team to probe eMudhra incident; impact on Indian websites, applications very limited: Govt
India's government forms a team to investigate a security incident at eMudhra's certificate business, saying the impact on Indian websites and applications is limited.
Human rights could improve – or worsen – based on how nations use the UN treaty against cybercrime
The UN's first cybercrime treaty aims to protect rights online but critics warn vague language could allow authoritarian governments to suppress legitimate expression.
After YouTube block, Mumbai Police asks X to remove 24 posts on Modi-Adani video essay
Mumbai Police issued legal notices to X requesting removal of posts related to a Modi-Adani video essay, citing defamation and provisions for promoting disharmony under Indian law.
Explained: eMudhra’s weak private keys used to issue website certificates were exposed; what it means
eMudhra, an Indian licensed certificate authority, exposed weak private keys that could issue fraudulent website certificates; the flaw was discovered with AI assistance and prompted browser vendors to block affected certificates.
US Orders DeepSeek Removal From Federal Civilian Systems Over National Security Concerns
The US Department of Homeland Security ordered federal civilian agencies to remove Chinese AI company DeepSeek from government systems and halt procurement, citing national security threats including data collection and potential malware.
EU wants Booking.com to check out of its scam problem
The European Commission opened a Digital Services Act investigation into Booking.com over its handling of phishing, fraudulent listings, and user data protection.
Booking.com targeted in EU investigation into phishing scams, fraudulent listings
The EU opened a Digital Services Act investigation into Booking.com following preliminary findings and risk assessment reports submitted over multiple years.
SBI confirms data of 3,897 customers exposed on dark web, silent on whether customers were informed
State Bank of India confirmed that personal data of 3,897 customers was exposed on the dark web, but has not disclosed whether customers were informed.