Researchers at Redact.dev discovered about 80 WhatsApp help and FAQ pages contained hidden text meant to guide a Meta chatbot, including sections labeled 'WHAT NOT TO SAY' and directions not to give legal advice. One instruction on the account-deletion page told the bot not to recommend contacting a data protection regulator. After WIRED asked Meta about the exposure, WhatsApp removed the text and said it was due to a bug that has since been fixed.
wired.com
· 2026-10-19
Norway's Data Protection Authority fined Xandr, an adtech unit now owned by Microsoft, 92 million kroner (about $9.6 million) for allegedly using sensitive Grindr user data for advertising without obtaining explicit consent. The agency said Xandr assumed Grindr had already secured user approval, and the case stems from a 2020 complaint by Norway's consumer council covering data practices between July 2018 and April 2020. It is the largest fine the NDPA has ever issued.
engadget.com
· 2026-10-12
The Dutch Data Protection Authority has fined Uber roughly $966 million for deactivating driver accounts through automated systems without adequate human review or warning, marking one of the largest penalties issued under GDPR. The investigation stemmed from complaints, including one from former French Uber driver Brahim Ben Ali, who gathered testimony from 170 other drivers alleging similar treatment. Uber disputes the regulator's findings and plans to appeal the fine.
techcrunch.com
· 2026-08-23
GoKawiil