GDPR

The UK’s tax office must destroy 7 million voiceprints. Would that happen in the U.S.?

Imagine the IRS sitting on a vast database of unique voiceprints collected from millions of citizens. That’s basically what happened in the U.K., but at least the country has an agency to fix the problem. The U.S. has no such safeguard — and one of its agencies has already started collecting face scans. Her Majesty’s…


Imagine the IRS sitting on a vast database of unique voiceprints collected from millions of citizens.

That’s basically what happened in the U.K., but at least the country has an agency to fix the problem. The U.S. has no such safeguard — and one of its agencies has already started collecting face scans.

Her Majesty’s Revenue and Customs office (HMRC) has been instructing customers to submit “voiceprints” since 2017, and it may not have received proper consent to do so. 

Now, the nation’s data protection enforcement agency, the Information Commissioner’s Office (ICO) has filed an official order that the HMRC must delete the Voice ID data of 7 million citizens. It has 28 days to comply with the May 9 order. 

In the U.S., government agencies are also collecting biometric data. Customs and Border Patrol (CPB) is scanning the faces of individuals leaving the country. It says the images are encrypted, and only stored for a short time. But experts worry that introducing facial recognition technology at airports could turn them into tools of mass surveillance. That could lead to unlawful arrests, which would disproportionately affect women and people of color, who facial recognition softw

Read More

Be the first to write a comment.

Leave a Reply

Your email address will not be published. Required fields are marked *

GDPR

Tech Tuesday: Data privacy and synthetic data generation tools

Data has become simultaneously the most valuable asset most organisations own and the most heavily regulated one. GDPR fines exceeded €4.5 billion cumulatively by early 2026. The EU AI Act’s classification of training data quality as a high-risk system requirement has made data provenance a legal obligation rather than a best practice…

Data has become simultaneously the most valuable asset most organisations own and the most heavily regulated one. GDPR fines exceeded €4.5 billion cumulatively by early 2026. The EU AI Act’s classification of training data quality as a high-risk system requirement has made data provenance a legal obligation rather than a best practice…
Read More

Continue Reading
GDPR

Researcher reveals official White House app is one command away from tracking your precise location every 4.5 minutes – app can also inject code to dodge cookie consent, GDPR banners, and paywalls

White House app contains code to hide cookie options, GDPR banners, and paywalls – and collects extensive user data…

White House app contains code to hide cookie options, GDPR banners, and paywalls – and collects extensive user data…
Read More

Continue Reading
GDPR

Viva la revolución: LinkedIn profile visitor lists belong to the people, says Noyb

GDPR Article 15 doesn’t care if you want to make money by selling users’ data back to them A LinkedIn feature the average non-paying user likely only glances past could end up setting a legal precedent in the EU regarding how companies treat customer data that they’ve processed. …

GDPR Article 15 doesn’t care if you want to make money by selling users’ data back to them A LinkedIn feature the average non-paying user likely only glances past could end up setting a legal precedent in the EU regarding how companies treat customer data that they’ve processed. …
Read More

Continue Reading
GDPR

Estonia is the rare EU country opposing bans on children’s social media use

In short: Estonia and Belgium are the only two EU member states to have declined the Jutland Declaration, an October 2025 pan-European commitment to restrict children’s access to social media. Estonia’s ministers argue that age-based bans are unenforceable, that children will find ways around them, and that the correct approach is to enforce the GDPR against

In short: Estonia and Belgium are the only two EU member states to have declined the Jutland Declaration, an October 2025 pan-European commitment to restrict children’s access to social media. Estonia’s ministers argue that age-based bans are unenforceable, that children will find ways around them, and that the correct approach is to enforce the GDPR against […]
This story continues at The Next Web…
Read More

Continue Reading