News

IT’S THE LAW (07/15/2025)

The UK Data (Use and Access) Act’s new 164B framework makes it mandatory for data controllers, including in marketing technology, ad tech and e-commerce, to track and report their complaint volume to the Information Commissioner’s Office (ICO) or risk being in violation of UK data protection law.

More News

Next Article

McDonald’s AI friend Olivia exposed data of millions of job applicants

July 15, 2025

Olivia, a third-party AI chatbot McDonald’s – and many other companies use to pre-screen, schedule, and communicate with potential employees was found in McDonalds’ case to have a security hole that exposed ~64 million chat logs of sensitive data. The breach was discovered by two researchers who randomly typed in “123456” as a password and found they had access to many years’ worth of applicant data. Olivia’s parent company, Paradox.ai which has had previous complaints about sloppiness in the system, said they fixed this.

CDPI Privacy Newsletter
Featured Article

Disney and OpenAI Reach Licensing Agreement for Sora

December 12, 2025

Disney has agreed to license more than 200 characters, costumes, and environments (but not voices or talent likenesses) to OpenAI for Sora, its gen AI video platform. This is highly unusual for Disney, which generally sues AI models for copyright infringement; in fact, it sued Google for that a day before announcing the OpenAI deal. Disney will also invest $1 billion in OpenAI, nicely illustrating how very eager they are to join the AI party.

CDPI Newsletter