Human rights principles Archives | Digital Watch Observatory

Google highlights rising online scam threats

Google has warned that online scams remain a major global challenge, citing estimates that fraud losses could reach nearly $580 billion in 2025.

In its latest fraud and scams advisory, the company said phishing attacks are becoming more sophisticated, with criminals using adversary-in-the-middle techniques and QR code phishing, also known as quishing, to steal credentials and bypass security measures.

The advisory also highlighted risks linked to cryptocurrency investment scams, malicious finance applications and police impersonation schemes. According to Google, scammers are using AI, social engineering and trusted digital services to deceive users, obtain money and collect sensitive information.

Google said its Trust & Safety teams are using AI tools, predictive analytics and policy enforcement to detect and disrupt fraudulent activity across its services. The company also pointed to measures such as stronger protections for session cookies, enforcement against deceptive crypto ads, monitoring of post-installation app behaviour and developer identity verification for apps installed on certified Android devices.

The company urged users to be cautious of unsolicited communications, unrealistic investment promises, unexpected QR codes and requests for personal or financial information.

Why does it matter?

The advisory shows how online fraud is becoming a cross-platform governance problem rather than a narrow cybersecurity issue. Scams now rely on trusted cloud services, mobile apps, messaging platforms, crypto infrastructure and impersonation of public authorities. That creates pressure on major technology companies to strengthen detection, app accountability and policy enforcement, while raising broader questions about consumer protection, platform responsibility and digital trust.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

EY Malta expands AI in audit services

EY Malta has introduced enterprise-scale agentic AI across its Assurance services, integrating the technology into EY Canvas, the firm’s global audit platform.

The rollout forms part of EY’s wider global strategy to embed AI into audit workflows and support audit quality, risk assessment, and client insights.

EY said the AI-enabled framework helps auditors analyse large volumes of data, assess risks, and access updated auditing and accounting guidance in real time. The firm said the technology is designed to support, not replace, auditors, with professional judgement and human oversight remaining central to the audit process.

The system is integrated with Microsoft Azure, Microsoft Foundry, and Microsoft Fabric, reflecting EY’s broader global partnership with Microsoft on the secure and scalable deployment of AI.

EY said the rollout follows global testing and is part of its long-term investment in audit quality, technology, and workforce development. The firm added that further AI enhancements are planned over the coming years as audit teams use the tools across more stages of the audit process.

EY Malta also highlighted related assurance and advisory services linked to AI readiness, governance, and risk management. The firm said the technology would allow teams in Malta to focus more on risk and audit quality while reducing administrative work.

Why does it matter?

The rollout shows how agentic AI is moving into regulated professional services, including audit, where accuracy, accountability, and human judgement remain central. AI could help auditors analyse larger datasets and focus on higher-risk areas. Still, it also raises questions about oversight, explainability, skills, liability, and how regulators assess AI-supported audit work.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Researchers develop AI governance tools for public health across the Global Majority

A research team led by Professor Jude Kong from the University of Toronto is developing new tools to monitor, assess, and govern the use of AI in public health across the Global Majority, with a particular focus on Africa.

The team, which includes Jake Effoduh, Jim Hinton, Abbas Yazdinejad, and Maral Niaz, has begun mapping how AI is being integrated into healthcare systems and infrastructure. The work focuses on identifying key actors, technologies and use cases, providing a clearer picture of how AI is becoming embedded in public health systems.

The next phase involves developing a dynamic dashboard designed to track AI systems and support evidence-based decision-making. Rather than relying solely on top-down governance frameworks, the team aims to co-develop tools that policymakers, civil society organisations, educators and practitioners can use in their own contexts.

In practice, this means creating tools that are not only technically robust but also socially legitimate and locally relevant. While strengthening AI literacy and governance capacity across the Global Majority, the initiative aims to empower policymakers with evidence-based insights, support civil society in understanding AI systems, and enable more informed and inclusive decision-making processes.

By bringing together expertise in technology, law, public policy and social impact, the project reflects the multidisciplinary nature of AI governance. The team will present its findings at the AI for Good Global Summit in Geneva, during ITU’s Kaleidoscope sessions on Thursday, 9 July 2026, from 15:30 to 16:30.

Why does this matter in AI world?

AI for the Global Majority (AI4GM) is a joint initiative of the Geneva Graduate Institute, Microsoft and the International Telecommunication Union. The initiative supports research on how AI can benefit majority populations in areas including governance, education, health, finance, and digital innovation.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Australia welcomes Apple child online safety tools

Australian Prime Minister Anthony Albanese has welcomed Apple’s new online safety controls for children, saying Apple CEO Tim Cook briefed him on the announcement.

According to Albanese, Cook said the changes were partly inspired by Australia’s under-16 social media age restrictions and by Apple’s continuing research into the impact of social media on children.

Albanese said Australia was proud of its work to support a safer online environment for children and argued that other countries are now developing similar social media age restrictions.

Cook invited Albanese to visit Apple during his next trip to the United States to see the technology in action. Albanese said he intended to accept the invitation as Australia continues to consider how best to protect children online.

The Prime Minister said Australian parents had led the push for stronger protections and that the government was backing their efforts. He said more than 5 million under-16 accounts had already been removed, deactivated, or restricted.

Albanese said social media companies have a social responsibility and that Australia would continue holding them to account to help keep children safe.

Why does it matter?

The announcement highlights how national online safety rules can shape platform design beyond a country’s borders. Australia’s under-16 social media restrictions have been closely watched internationally, and Albanese is presenting Apple’s new child safety tools as evidence that regulatory pressure can push major technology companies towards stronger child protection features. The case also shows the growing link between device-level controls, platform accountability, age assurance, and children’s digital rights.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

UK to launch national centre for AI in policing

The UK government is preparing to formally launch PoliceAI, a national centre dedicated to AI in policing, later this month. The centre began mobilising in April 2026 and will support police forces in England and Wales with the responsible adoption of AI and automation.

The government says the use of AI in policing must be lawful, ethical and transparent, supported by robust algorithmic assessments before deployment. It also emphasises that accountability for AI performance and the use of AI-generated outputs must be clearly defined through operational procedures and governance frameworks.

PoliceAI will be hosted by the College of Policing and funded through a Home Office grant under Section 57 of the Police Act 1996. The centre is expected to coordinate AI-related activity across police forces, helping to reduce duplication, improve consistency and strengthen public confidence.

PoliceAI will include an AI Lab responsible for developing, testing and evaluating AI tools, products and services for policing applications. It will assess commercial products and open-source models, benchmark their performance in a UK policing context, run sandbox testing, and support more informed procurement and deployment decisions by Chief Officers.

PoliceAI will also support forces with adoption, guidance, procurement, training, and business change. A dedicated strategy and oversight function will also maintain a public registry of AI models used in operational policing, including details of testing, governance checks and deployment safeguards.

Initial priorities include case file assistants, disclosure assistants, crime data integrity tools, rapid analysis of CCTV and digital media, image identification and classification, governance for Copilot use, transcription and translation tools, and possible AI applications for retail crime and tool theft. A Policing AI Threat Hub will support efforts to address criminal misuse of AI, including the detection of deepfakes and AI-generated false evidence.

Why does it matter?

Police forces are increasingly exploring AI tools to support investigations, administrative tasks, evidence analysis and operational decision-making. However, the use of AI in law enforcement raises important questions about transparency, accountability, bias, public trust and oversight.

PoliceAI represents an effort to create a more coordinated approach to AI adoption across policing in England and Wales. By providing testing, governance, training and public transparency mechanisms, the centre aims to help police forces deploy AI technologies more consistently while addressing concerns about their responsible use.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

Malaysian PM urges ethical AI development

Malaysian Prime Minister Datuk Seri Anwar Ibrahim has called for AI development to be guided by humanity, ethics and moral values, arguing that technological progress should serve society and uphold human dignity.

Speaking during a special lecture at the University of Tokyo, Anwar said AI and other emerging technologies could transform economies, improve public services and enhance quality of life. However, he stressed that innovation should be shaped by strong ethical principles rather than technological capability alone.

According to Anadolu Agency, Anwar said AI development should be guided by justice, accountability and compassion. He added that governments, researchers and businesses share responsibility for ensuring that technology strengthens social cohesion and supports the common good.

The Malaysian prime minister also called for stronger international cooperation to manage the opportunities and risks linked to rapid technological change. He said countries should work together to promote inclusive and sustainable development while safeguarding ethical standards.

Why does it matter?

AI governance debates are increasingly moving beyond technical safety and economic competitiveness towards questions of values, accountability and public interest. Anwar’s remarks are not a new regulatory measure, but they reflect how governments in Asia are framing AI as a societal and diplomatic issue, with ethics, inclusion and international cooperation becoming recurring policy themes.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

EDPS debate to examine EU Omnibus data protection proposals

The European Data Protection Supervisor (EDPS), Germany’s Federal Commissioner for Data Protection and Freedom of Information, and the Bavarian Data Protection Commissioner will host a high-level debate on the European Commission’s Omnibus proposals. The event, titled ‘From Omnibus to Opportunity: Driving Data Protection and Innovation’, will take place in Brussels on 8 June.

The debate will examine the Omnibus proposals and their potential implications for the GDPR and the wider EU digital regulatory framework. The event is hosted by the Representation of the Free State of Bavaria to the European Union.

According to the EDPS, the proposals introduce targeted adjustments affecting elements of the EU digital acquis, including aspects of the GDPR and the AI Act. Their stated objective is to simplify compliance requirements and reduce administrative burdens while maintaining a high level of protection for fundamental rights.

Discussions will focus on legal certainty, regulatory coherence, preserving the GDPR’s level of protection, and identifying ways to strengthen fundamental rights, innovation and competitiveness across the EU.

Participants are expected to include representatives from the European Parliament, the Council of the European Union, the European Commission, data protection authorities, academia, civil society and the private sector.

Why does it matter?

The Omnibus proposals have become a focal point in wider debates about how the European Union can strengthen competitiveness and innovation while preserving high standards of data protection and fundamental rights.

The discussion highlights growing efforts to balance regulatory simplification with legal certainty and effective safeguards, particularly as the EU seeks to implement complex frameworks such as the GDPR and AI Act while supporting digital innovation and economic growth.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our Diplo chatbot!

India targets dark patterns with fines for PhysicsWallah and McAfee

India’s Central Consumer Protection Authority has fined PhysicsWallah and McAfee Software India for using dark patterns that the regulator said misled consumers and influenced their choices on digital platforms.

PhysicsWallah was fined ₹5 lakh, while McAfee was fined ₹1 lakh. Both companies were directed to remove the practices from their platforms and ensure that users can make informed choices without pressure or manipulation.

The action was taken under the Consumer Protection Act 2019, the Consumer Protection (E-Commerce) Rules 2020, and the Guidelines for Prevention and Regulation of Dark Patterns 2023.

In the PhysicsWallah case, the regulator found that a ₹10 donation to the PW Foundation was automatically selected during checkout and added to the total payable amount without the consumer’s explicit consent. Users were also shown emotional messages related to children’s education, healthcare, and marriages that encouraged them to keep the donation selected.

The CCPA also found that courses advertised as free could only be accessed after users shared personal information such as a mobile number and email address. The regulator said the content remained the same across user accounts, indicating that mandatory data collection was not necessary to access the courses.

The authority identified basket sneaking, confirm shaming, and forced action in the PhysicsWallah case. It also said the practices raised serious consumer protection concerns because many users on the platform are students, including minors.

In the McAfee case, the CCPA found that users deciding whether to renew subscriptions were shown options such as ‘Renew Now’ and ‘Accept Risk’. The authority said the wording portrayed non-renewal as a risky decision and created pressure on consumers to continue their subscriptions.

The regulator identified confirmation shaming, interface interference, trick questions, and forced action in McAfee’s renewal process, saying consumers should be able to make subscription decisions freely and without fear-based messaging or misleading design.

The CCPA said the orders form part of its continued action against dark patterns in digital marketplaces. It reiterated that consumer consent must be explicit, informed, and free from manipulative design practices.

Why does it matter?

The penalties show that dark pattern rules in India are moving from guidance to enforcement. By targeting pre-selected donations, emotionally loaded opt-out messages, forced data sharing, and fear-based subscription renewal design, the CCPA is signalling that manipulative interface design can be treated as a consumer protection violation, not just a poor user experience.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Brazil’s telecom regulator adopts AI governance framework

Brazil’s telecommunications regulator, Anatel, has approved a new AI governance policy aimed at ensuring the ethical, secure, and transparent use of AI across its regulatory and administrative activities. The framework positions the agency among public institutions in Brazil, proactively addressing the challenges and opportunities of AI-driven transformation.

Developed by the agency’s IA.lab research group, the policy establishes principles including human oversight, transparency, data security and the protection of fundamental rights. It also creates a permanent forum to monitor AI use, assess risks, and support decision-making, ensuring AI complements rather than replaces human judgment in regulation.

A key objective of the policy is to strengthen technological sovereignty by encouraging the development and adoption of AI solutions built in Brazil and, where appropriate, trained on local data and optimised for Portuguese-language use cases.

The policy also lays the groundwork for a broader national AI strategy within the agency, designed to expand responsible innovation across telecommunications regulation and public service delivery.

Anatel said the governance model is intended to balance innovation and accountability, enabling the use of AI to improve efficiency while maintaining security, trust and regulatory integrity.

Why does it matter?

The policy places Anatel among a growing number of public-sector regulators establishing formal governance frameworks for AI. As regulatory agencies increasingly adopt AI tools, questions around transparency, accountability, human oversight and risk management are becoming central to public trust.

The framework also reflects broader efforts by governments to promote technological sovereignty by supporting domestic AI capabilities while ensuring that innovation aligns with legal, ethical and public-interest objectives.

Would you like to learn more about AI, tech, and digital diplomacy? If so, ask our chatbot!

Aithos LARA reveals major AI compliance gaps under the EU AI Act and the GDPR

The Aithos Research Foundation has launched Aithos LARA (Legal Assessment for Real-world Agents), a public evaluation framework designed to assess whether AI agents comply with key European legal requirements.

The framework places AI models in simulated workplace and consumer-service scenarios where completing assigned tasks may involve actions that conflict with provisions of the EU AI Act or the General Data Protection Regulation (GDPR).

According to Aithos, an initial evaluation involving more than 3,000 tests across 12 frontier AI models found that none consistently met acceptable levels of legal compliance. Compliance rates ranged from 7% to 54%, with the highest-performing model adhering to legal requirements in only slightly more than half of the assessed scenarios.

The research suggests that current frontier AI systems may prioritise task completion over legal obligations when operating with a high degree of autonomy.

Furthermore, the study assessed compliance with six provisions of the EU AI Act and four core GDPR principles, including transparency, lawful processing, data minimisation and purpose limitation.

Researchers reported instances in which models generated outputs that would conflict with some of the AI Act’s prohibited practices, including exploiting vulnerable individuals, conducting emotion recognition in workplace environments and engaging in forms of manipulation prohibited under European law.

To increase transparency, Aithos has made evaluation transcripts, model outputs and judicial assessments publicly available. The organisation argues that independent and public oversight can complement company-led governance efforts by providing greater transparency into how AI systems behave in legally and ethically sensitive contexts.

Why does it matter?

The findings highlight the challenges of deploying AI agents in regulated environments where legal compliance is essential. As organisations increasingly explore AI for customer service, human resources, finance and operational decision-making, ensuring that systems comply with data protection and AI regulations is becoming a key governance requirement.

The research also underscores the growing importance of independent testing and oversight mechanisms as policymakers and regulators seek to evaluate how autonomous AI systems behave in real-world scenarios.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!