Privacy and data protection

EU says US tech firms censor more

Far more online content is removed under US tech firms’ terms and conditions than under the EU’s Digital Services Act (DSA), according to Tech Commissioner Henna Virkkunen.

Her comments respond to criticism from American tech leaders, including Elon Musk, who have labelled the DSA a threat to free speech.

In an interview with Euractiv, Virkkunen said recent data show that 99% of content removals in the EU between September 2023 and April 2024 were carried out by platforms like Meta and X based on their own rules, not due to EU regulation.

Only 1% of cases involved ‘trusted flaggers’ — vetted organisations that report illegal content to national authorities. Just 0.001% of those reports led to an actual takedown decision by authorities, she added.

The DSA’s transparency rules made those figures available. ‘Often in the US, platforms have more strict rules with content,’ Virkkunen noted.

She gave examples such as discussions about euthanasia and nude artworks, which are often removed under US platform policies but remain online under European guidelines.

Virkkunen recently met with US tech CEOs and lawmakers, including Republican Congressman Jim Jordan, a prominent critic of the DSA and the DMA.

She said the data helped clarify how EU rules actually work. ‘It is important always to underline that the DSA only applies in the European territory,’ she said.

While pushing back against American criticism, Virkkunen avoided direct attacks on individuals like Elon Musk or Mark Zuckerberg. She suggested platform resistance reflects business models and service design choices.

Asked about delays in final decisions under the DSA — including open cases against Meta and X — Virkkunen stressed the need for a strong legal basis before enforcement.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

AT&T hit by alleged 31 million record breach

A hacker has allegedly leaked data from 31 million AT&T customers, raising fresh concerns over the security of one of America’s largest telecom providers. The data, posted on a major dark web forum in late May 2025, is said to contain 3.1GB of customer information in both JSON and CSV formats.

Instead of isolated details, the breach reportedly includes highly sensitive data: full names, dates of birth, tax IDs, physical and email addresses, device and cookie identifiers, phone numbers, and IP addresses.

Cybersecurity firm DarkEye flagged the leak, warning that the structured formats make the data easy for criminals to exploit.

If verified, the breach would mark yet another major incident for AT&T. In March 2024, the company confirmed that personal information from 73 million users had been leaked.

Just months later, a July breach exposed call records and location metadata for nearly 110 million customers, with blame directed at compromised Snowflake cloud accounts.

AT&T has yet to comment on the latest claims. Experts warn that the combination of tax numbers and device data could enable identity theft, financial scams, and advanced phishing attacks.

For a company already under scrutiny for past security lapses, the latest breach could further damage public trust.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Victoria’s Secret website hit by cyber attack

Victoria’s Secret’s website has remained offline for three days due to a security incident the company has yet to fully explain. A spokesperson confirmed steps are being taken to address the issue, saying external experts have been called in and some in-store systems were also taken down as a precaution.

Instead of revealing specific details, the retailer has left users with only a holding message on a pink background. It has declined to comment on whether ransomware is involved, when the disruption began, or if law enforcement has been contacted.

The firm’s physical stores continue operating as normal, and payment systems are unaffected, suggesting the breach has hit other digital infrastructure. Still, the shutdown has rattled investors—shares fell nearly seven percent on Wednesday.

With online sales accounting for a third of Victoria’s Secret’s $6 billion annual revenue, the pressure to resolve the situation is high.

The timing has raised eyebrows, as cybercriminals often strike during public holidays like Memorial Day, when IT teams are short-staffed. The attack follows a worrying trend among retailers.

UK giants such as Harrods, Marks & Spencer, and the Co-op have all suffered recent breaches. Experts warn that US chains are becoming the next major targets, with threat groups like Scattered Spider shifting their focus across the Atlantic.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Copilot for Gaming now in testing on Xbox app for iOS and Android

Microsoft has begun rolling out the beta version of its new AI-powered tool, Copilot for Gaming, designed to enhance the gaming experience through personalised assistance. Available now in the Xbox app for iOS and Android, the feature lets users ask game-related questions and receive tailored responses based on their gaming history, achievements, and account data.

The AI assistant can provide tips to improve a gamer’s score, suggest games based on user preferences, and answer account-specific questions like subscription details or recent in-game milestones. It operates on a second screen to avoid disrupting gameplay and uses player activity and Bing search data to craft responses.

Initially available in English for players aged 18 and older, the beta spans over 50 countries, including the US, Canada, Brazil, Serbia, and Japan. Microsoft says more features are on the way, including personalised coaching and deeper in-game support, with plans to expand the rollout to additional regions in the future.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Telegram partners with Musk’s xAI

Elon Musk’s AI company, xAI, is partnering with Telegram to bring its AI assistant, Grok, to the messaging platform’s more than one billion users.

Telegram founder Pavel Durov announced that Grok will be integrated into Telegram’s apps and distributed directly through the service.

Instead of a simple tech integration, the arrangement includes a significant financial deal. Telegram is set to receive $300 million in cash and equity from xAI, along with half of the revenue from any xAI subscriptions sold through the platform. The agreement is expected to last one year.

The move mirrors Meta’s recent rollout of AI features on WhatsApp, which drew criticism from users concerned about the changing nature of private messaging.

Analysts like Hanna Kahlert of Midia Research argue that users still prefer using social platforms to connect with friends, and that adding AI tools could erode trust and shift focus away from what made these apps popular in the first place.

The partnership also links two controversial tech figures. Durov was arrested in France in 2024 over allegations that Telegram failed to curb criminal activity, though he denies obstructing law enforcement.

Meanwhile, Musk has been pushing into AI development after falling out with OpenAI, and is using xAI to rival industry giants. In March, he valued xAI at $80 billion after acquiring X, formerly known as Twitter.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

The future of search: Personalised AI and the privacy crossroads

The rise of personalised AI is poised to radically reshape how we interact with technology, with search engines evolving into intelligent agents that not only retrieve information but also understand and act on our behalf. No longer just a list of links, search is merging into chatbots and AI agents that synthesise information from across the web to deliver tailored answers.

Google and OpenAI have already begun this shift, with services like AI Overview and ChatGPT Search leading a trend that analysts say could cut traditional search volume by 25% by 2026. That transformation is driven by the AI industry’s hunger for personal data.

To offer highly customised responses and assistance, AI systems require in-depth profiles of their users, encompassing everything from dietary preferences to political beliefs. The deeper the personalisation, the greater the privacy risks.

OpenAI, for example, envisions a ‘super assistant’ capable of managing nearly every aspect of your digital life, fed by detailed knowledge of your past interactions, habits, and preferences. Google and Meta are pursuing similar paths, with Mark Zuckerberg even imagining AI therapists and friends that recall your social context better than you do.

As these tools become more capable, they also grow more invasive. Wearable, always-on AI devices equipped with microphones and cameras are on the horizon, signalling an era of ambient data collection.

AI assistants won’t just help answer questions—they’ll book vacations, buy gifts, and even manage your calendar. But with these conveniences comes unprecedented access to our most intimate data, raising serious concerns over surveillance and manipulation.

Policymakers are struggling to keep up. Without a comprehensive federal privacy law, the US relies on a patchwork of state laws and limited federal oversight. Proposals to regulate data sharing, such as forcing Google to hand over user search histories to competitors like OpenAI and Meta, risk compounding the problem unless strict safeguards are enacted.

As AI becomes the new gatekeeper to the internet, regulators face a daunting task: enabling innovation while ensuring that the AI-powered future doesn’t come at the expense of our privacy.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

UK and EU strengthen maritime and cyber security

The UK and the EU have agreed to step up cooperation on cybersecurity as part of a wider defence and security pact.

The new framework, signed on 19 May, marks a major shift towards joint efforts in countering digital threats and hybrid warfare.

Instead of managing these challenges separately, the UK and EU will hold structured dialogues to address cyberattacks, disinformation campaigns, and other forms of foreign interference.

The deal outlines regular exchanges between national security officials, supported by thematic discussions focused on crisis response, infrastructure protection, and online misinformation.

A key aim is to boost resilience against hostile cyber activity by working together on detection, defence, and prevention strategies. The agreement encourages joint efforts to safeguard communication networks, protect energy grids, and strengthen public awareness against information manipulation.

The cooperation is expected to extend into coordinated drills and real-time threat sharing.

While the UK remains outside the EU’s political structure, the agreement positions it as a close cyber security partner.

Future plans include exploring deeper collaboration through EU defence projects and potentially forming a formal link with the European Defence Agency, ensuring that both sides can respond more effectively to emerging digital threats.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

Opera unveils AI-first Neon browser

Opera has unveiled a new AI-powered web browser called Neon, describing it as an ‘agentic browser’ designed to carry out internet tasks on the user’s behalf.

Unlike traditional browsers, Neon offers contextual awareness and cloud-based AI agents that can research, design, and build content automatically.

Although Opera introduced a browser called Neon in 2017 that failed to gain traction, the company is giving the name a second chance, now with a more ambitious AI focus. According to Opera’s Henrik Lexow, the rise of AI marks a fundamental shift in how users interact with the web.

Among its early features, Neon includes an AI engine capable of interpreting user requests and generating games, code, reports, and websites—even when users are offline.

It also includes tools like a chatbot for web searches, contextual page insights, and automation for online tasks such as form-filling and booking services.

The browser is being positioned as a premium subscription product, though Opera has yet to reveal pricing or launch dates. Neon will become the fifth browser in Opera’s line-up, following the mindfulness-focused Air browser announced in February.

Interested users can join the waitlist, but for now, full capabilities remain unverified.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

AI Mode reshapes Google’s search results

One year after launching AI-generated search results via AI Overviews, Google has unveiled AI Mode—a new feature it claims will redefine online search.

Functioning as an integrated chatbot, AI Mode allows users to ask complex questions, receive detailed responses, and continue with follow-up queries, eliminating the need to click through traditional links.

Google’s CEO Sundar Pichai described it as a ‘total reimagining of search,’ noting significant changes in user behaviour during early trials.

Analysts suggest the company is attempting to disrupt its own search business before rivals do, following internal concerns sparked by the rise of tools like ChatGPT.

With AI Mode, Google is increasingly shifting from directing users to websites toward delivering instant answers itself. Critics fear it could dramatically reduce web traffic for publishers who depend on Google for visibility and revenue.

While Google insists the open web will continue to grow, many publishers remain unconvinced. The News/Media Alliance condemned the move, calling it theft of content without fair return.

Links were the last mechanism providing meaningful traffic, said CEO Danielle Coffey, who urged the US Department of Justice to take action against what she described as monopolistic behaviour.

Meanwhile, Google is rapidly integrating AI across its ecosystem. Alongside AI Mode, it introduced developments in its Gemini model, with the aim of building a ‘world model’ capable of simulating and planning like the human brain.

Google DeepMind’s Demis Hassabis said the goal is to lay the foundations for an AI-native operating system.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!

The EU lawmakers investigate Italian surveillance case

A delegation from the European Parliament’s Civil Liberties, Justice and Home Affairs Committee (LIBE) will visit Rome on 30 May to examine the unfolding controversy surrounding the use of Paragon’s spyware in Italy.

The mission will be led by Sandro Ruotolo, a member of the European Parliament, and will include meetings with surveillance victims, press representatives, and members of the parliamentary committee responsible for intelligence oversight, known as COPASIR.

The Israeli-developed surveillance software, Graphite, produced by Paragon, is at the centre of the investigation. Reports allege that the tool was used to monitor investigative journalists and NGO activists in Italy, sparking national concern and leading to the termination of Italy’s agreement with the company.

Despite public pressure for clarity, the Italian government has declined to release additional information, stating that any clarifications would be delivered exclusively to COPASIR, which is currently evaluating the claims.

Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!