AI is transforming consumer lending, promising faster credit decisions and greater access. But the reality is more complicated. Many AI-based scoring systems rely on alternative data — utility payments, online behavior, even social media activity — to predict creditworthiness.

In 2016, computer scientist Joy Buolamwini made a striking discovery at the MIT Media Lab—facial analysis software could not detect her face unless she wore a white mask, due to biased training data favoring light-skinned individuals.

In early 2025, TikTok quietly updated its privacy policy for users in the U.S. and Europe. The changes, buried deep in the fine print, outline broader data-sharing arrangements with its parent company ByteDance, as well as unnamed “business partners.” Privacy advocates warn that these updates could expose users to greater tracking, profiling, and potential government access.

Health and wellness apps have surged in popularity, but their privacy practices are often murky. An analysis of 10 top apps — from fitness trackers to meditation and period-tracking apps — reveals that most collect far more data than necessary and reserve the right to share it with advertisers or data brokers.

Phishing is the practice of tricking people into revealing sensitive information, and has long been a top cyber threat. But in 2025, phishing has entered a new era: attackers are now using AI tools to generate highly convincing and customized phishing messages at scale.

Despite growing public awareness and new privacy laws, data broker companies that buy, sell, and aggregate personal information continue to thrive. These firms compile data from credit reports, social media, app usage, and even offline purchases, building profiles that can include thousands of data points per person.

In a significant development within the 2025 federal budget bill, lawmakers have proposed a 10-year moratorium on state-level AI regulation. This provision, supported by major tech lobbying groups and some Republican legislators, aims to establish a uniform national standard for AI governance. Proponents argue that avoiding a fragmented regulatory patchwork will reduce legal complexity and foster innovation and economic competitiveness.

Europe’s landmark AI Act has officially entered the implementation phase, ushering in one of the world’s most comprehensive frameworks for governing artificial intelligence. The law targets high-risk AI systems, including biometric identification, predictive policing, and AI in critical infrastructure, with strict requirements for transparency, human oversight, and risk assessments.

New Orleans is at the center of a national debate as it considers an ordinance to legalize real-time facial recognition surveillance across the city.