Breach Notification

Breach notification refers to the legal requirement to inform affected individuals, regulators, and sometimes the public when personal data or sensitive information is compromised in a security incident. Organizations must typically provide timely notice under frameworks like GDPR, state privacy laws, and industry-specific regulations, with notification timelines ranging from 30 to 72 hours depending on jurisdiction. This requirement directly impacts AI governance because machine learning systems often process large datasets of personal information, making data breach incidents a critical compliance risk that enterprises must anticipate and manage through incident response planning.

1 item

EnforcementGlobal2026-08-10

181,874 Meetings Exposed After tl;dv Ignored Six-Month Disclosure

A security researcher found that tl;dv, an AI meeting recording platform used by more than two million people, left its entire Firestore meetings database readable by any authenticated user due to a missing tenant isolation control. The exposure covered 181,874 meeting records across 84,312 users, including government agencies in 23 countries, universities, and corporations. The vulnerability was disclosed in January 2026 but remained unpatched as of July 2026, despite the company's published claims of SOC2, GDPR, and EU AI Act compliance.

tl;dv data exposure vendor risk GDPR AI meeting tools tenant isolation third-party AI risk breach notification