John Edwards, chair of the UK's Information Commissioner's Office (ICO) and the country's data and AI regulator, has resigned following a workplace investigation.
Edwards, who led the independent authority responsible for enforcing data protection and freedom of information laws, stepped down after accepting findings from the internal inquiry.
The ICO oversees compliance with the UK's data protection framework and investigates breaches affecting millions of citizens. The regulator also plays a key role in shaping AI governance as the technology sector faces increasing regulatory scrutiny.
Edwards' departure marks a significant leadership change for the agency during a period of heightened focus on data privacy and algorithmic accountability. The timing coincides with ongoing debates about the ICO's enforcement powers and its approach to regulating emerging technologies.
No immediate successor has been announced. The investigation details remain limited, though Edwards acknowledged "occasions" of concern during his tenure.
The resignation comes as data protection agencies across Europe grapple with increasingly complex enforcement challenges and evolving technological risks.
Security firm Huntress analyzed a real-world intrusion to reveal how threat actors operate once inside a network. The findings show attackers focus on persistence and defense evasion rather than stopping after initial access.
South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) for data protection violations.
JetBrains has disclosed a critical authentication bypass vulnerability in TeamCity On-Premises that allows attackers to execute remote code. The flaw affects the company's continuous integration and deployment platform.