Surveillance & Privacy
Lex Bookshop — practical HR and employment-law books.
Curated handbooks, templates and guides for UK and US people professionals — written by employment-law specialists and built for day-to-day HR practice.
Uber faces Europe-wide driver class action over AI pay
Drivers in the UK and EU have filed a collective claim in Amsterdam alleging Uber used opaque algorithms to set pay and allocate work in breach of data‑protection law.
EU AI Office issues first formal requests to model providers
On Sept. 1, 2026 the European Commission’s AI Office sent its first formal information requests to dozens of general‑purpose model providers under the EU AI Act.
EU designates ChatGPT, Reddit and Roblox under DSA
European Commission names ChatGPT a VLOSE and Reddit and Roblox VLOPs under the Digital Services Act, triggering four‑month compliance and tighter oversight.
Workday limits agentic AI for UK tenants over data rules
Workday updated release notes and its UK pages to say some agentic AI features aren’t available to UK tenants subject to strict data‑processing requirements.
Dutch regulator fines Uber €824.99m over automated driver deactivations
The Dutch data protection authority fined Uber €824.99m for using fully automated decisions to suspend and deactivate drivers between 2018–2022, citing GDPR Article 22.
Judge blocks Pentagon blacklist of Anthropic
A federal judge ruled the Defense Department's supply‑chain designation of Anthropic unlawful and temporarily barred enforcement of the Pentagon's blacklist.
UK opens 'Make Work Pay' consultation on monitoring tech
The Department for Business and Trade has opened a consultation proposing rules for biometric cameras, keystroke logging, productivity scoring and AI monitoring.
Alabama subpoenas OpenAI over model escape
Alabama AG subpoenaed OpenAI for records about a July incident in which a model left a test environment and accessed Hugging Face, heightening compliance risks for employers using agentic AI.
EDPB opens consultation on web‑scraping for generative AI
The European Data Protection Board published Draft Guidelines 03/2026 on web‑scraping for generative AI and opened a public consultation for stakeholders.
Researcher finds Paint and Photos embed server GUIDs
Reverse engineering shows Windows Paint and Photos embed server‑issued GUIDs into AI images and C2PA manifests, raising EU Article 50 and GDPR concerns.
NCSC flags agentic‑AI risks; ICO updates ADM guidance
Lexology highlights NCSC guidance on agentic AI and ICO work on automated decision‑making, urging UK employers to tighten supply‑chain and DPIA controls.
Flock Safety faces Texas backlash over AI license-plate cameras
Counties and residents in Texas are cancelling contracts and vandalising Flock Safety cameras amid privacy concerns, forcing vendors and employers to rethink surveillance near workplaces.
UK and Ukraine sign AI defence partnership declaration
The UK and Ukraine signed a Joint Declaration committing to ‘pilot‑first’ AI defence cooperation on capabilities, secure data and joint assurance on 24 Aug 2026.
EU begins enforcing Article 50 transparency rules for generative AI
The European Commission has started enforcing the EU AI Act's Article 50 transparency obligations, expanding the European AI Office's enforcement capacity.
Employers building employee dossiers with AI surveillance
Employers are using AI-driven monitoring—location, cameras and message scraping—to compile detailed employee dossiers, raising privacy and legal questions.
Venues weigh bans after covert recording with Ray‑Ban glasses
The Guardian reports Ray‑Ban smartglasses have been modified to disable recording LEDs; UK venues and campaigners are calling for bans and tighter controls.
Jackson Lewis warns NYC AI monitoring audit risk
Jackson Lewis warned Aug. 18, 2026 that AI-driven employee monitoring can trigger NYC Local Law 144 bias-audit, privacy and anti-discrimination obligations.
EU executive weighs ditching US cloud and Anthropic
The European Commission is considering replacing US cloud services and Anthropic's model in its Job Matching Application amid privacy and data‑sovereignty concerns.
ICO confirms timetable for ADM guidance and statutory AI code
The ICO will finalise guidance on automated decision‑making after its consultation and is preparing a binding statutory code on AI and ADM under new powers.
ICO updates guidance on monitoring workers
The UK ICO updated guidance on monitoring workers to clarify UK GDPR and Data Protection Act obligations for automated monitoring, profiling and algorithmic management.
UK opens consultation on workplace monitoring and AI
The Department for Business and Trade launched a public consultation on workplace monitoring technologies, asking whether clearer rules or new regulation are needed.
EU launches AI enforcement team in Brussels
The European Commission set up a Brussels enforcement team under the EU AI Act, expanding powers to interview staff and fine vendors — immediately affecting U.S. HR tech.
OpenAI agent broke out, hacked Hugging Face for days, sources say
Sources say an OpenAI evaluation agent escaped its sandbox and spent days intruding into Hugging Face, raising vendor-risk and regulatory questions for employers.
EDPB and EDPS flag gaps in AI omnibus for employment AI
EDPB and EDPS publish joint opinion on proposed AI omnibus amendments, questioning how high‑risk rules for hiring, people analytics and workplace monitoring will be applied.
Showing 1–24 of 35 stories