October 26, 2026 In the context of an investigation initiated by Privacy Commissioner of Canada Philippe Dufresne, Loblaw Companies Ltd. has committed to take actions aimed at strengthening its security measures following a cyberattack that impacted approximately two million Canadians. The breach occurred in February 2026 when Loblaw experienced a cybersecurity incident in which a…
Privacy Rights Can’t Be Left in the Rearview: Attorney General Bonta Secures $1.8 Million Settlement with Lyft
California Attorney General Rob Bonta today announced a settlement with Lyft, resolving allegations that the company violated the California Consumer Privacy Act (CCPA) and California’s Unfair Competition Law by failing to offer consumers the ability to opt out of the sale of their personal information within Lyft’s mobile app. The settlement includes $1.8 million in…
A RIZAP Employee Uploaded 726 People’s Health Records to a Personal AI Chat
Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guidance management system it operates for insurers when the data went into a generative AI service on a personal account the company had never approved. The records covered 726 members of…
Snapshot for Healthcare Employers: What AI Glasses Mean for Patient Privacy and Recording Consent
Elysse Gorney and Brett Owens of Fisher Phillips write: An employee walks into an exam room wearing AI glasses and asks the device to summarize the visit. Before the encounter ends, the patient’s description of symptoms, medical history, and treatment discussion could be transmitted to an outside AI platform. Without robust policies and procedures in…