Digital Economy and Data Protection Newsletter（26.13）

（Click on the source or copy the corresponding link to view the details）

1. The China National Intellectual Property Administration Issues Announcement No. 684, Preliminarily Including 26 Emblems Notified by the International Bureau of the World Intellectual Property Organization on March 31, 2026 in the Scope of Protection for Official Emblems in China

   Source: China National Intellectual Property Administration

   https://www.cnipa.gov.cn/art/2026/7/21/art_74_207316.html

   
   

2. The Cyberspace Administration of China Releases a Policy and Regulatory Q&A on Security Administration of Outbound Data Transfers

   Source: Cyberspace Administration of China

   
   

3. Cyberspace Authorities Strengthen Regulation of Self-Media Accounts that Fail to Properly Identify Information Sources

   Source: Cyberspace Administration of China

   
   

4. The Office of the Central Cyberspace Affairs Commission and the Ministry of Emergency Management Launch a Centralized Campaign to Remove Illegal and Harmful Online Information Relating to Flood-Season Disasters and Accidents

   Source: Cyberspace Administration of China

   
   

5. The Reporting Center of the Office of the Central Cyberspace Affairs Commission Refers 759 Impersonation and Fraudulent Websites for Handling in the First Half of the Year

   Source: Reporting Center of the Office of the Central Cyberspace Affairs Commission

   
   

6. The Office of the Central Cyberspace Affairs Commission Launches the “Clean and Healthy Cyberspace—Online Protection of Minors” Special Campaign

   Source: Cyberspace Administration of China

   
   

7. Announcement of the Cyberspace Administration of China on the Eighteenth Batch of Filed Deep Synthesis Service Algorithms

   Source: Cyberspace Administration of China

   https://www.cac.gov.cn/2026-07/17/c_1786032856662750.htm

   
   

8. The Cyberspace Administration of China and Relevant Parties Propose the Global Initiative for Mutual Trust, Interconnection and Interoperability of Agents

   Source: Cyberspace Administration of China

   
   

9. Announcement on the Filing Information of Seven Mobile On-Device Generative AI Services

   Source: Cyberspace Administration of China

   
   

10. The Cyberspace Administration of China Releases an Announcement on Filed Generative AI Services

    Source: Cyberspace Administration of China

    
    

11. The Office of the Central Cyberspace Affairs Commission Takes Strict Action Against Accounts and Platforms with Non-Compliant Labeling of Short-Video Content

    Source: Cyberspace Administration of China

    
    

12. The Quality Supervision and Testing Center for Security Products of Computer Information Systems of the Ministry of Public Security Identifies 35 Mobile Applications that Unlawfully or Irregularly Collect and Use Personal Information

    Source: Quality Supervision and Testing Center for Security Products of Computer Information Systems, Ministry of Public Security

    
    

13. The Cybersecurity Bureau of the Ministry of Public Security Releases 10 Typical Cases of Lawful Enforcement Against Illegal Online Football Gambling

    Source: Cybersecurity Bureau of the Ministry of Public Security

    
    

14. The Cybersecurity Bureau of the Ministry of Public Security Announces the Detection of a Case Involving Infringement of Citizens’ Personal Information, with Criminal Compulsory Measures Taken Against 13 Individuals

    Source: Cybersecurity Bureau of the Ministry of Public Security

    
    

15. Public Security Authorities Crack Down on the Fabrication and Dissemination of Online Rumors Relating to Floods and Other Disasters and Release 25 Typical Cases

    Source: Ministry of Public Security

    
    

16. The Shenzhen Intermediate People’s Court, Shenzhen People’s Procuratorate, and Shenzhen Administration for Market Regulation Jointly Release Eight Typical Trade Secret Protection Cases

    Source: Shenzhen Administration for Market Regulation

    
    

17. Announcement on Filed Generative AI Services in Beijing

    Source: Beijing Cyberspace Administration

    
    

18. The Shanghai Cyberspace Administration Releases an Announcement on Filed Generative AI Services (July 27)

    Source: Shanghai Cyberspace Administration

    
    

19. The Shanghai Cyberspace Administration Releases an Announcement on Filed Generative AI Services (May–June 2026)

    Source: Shanghai Cyberspace Administration

    
    

20. Guangdong Launches a Special Campaign for the Online Protection of Minors

    Source: Guangdong Cyberspace Administration

    
    

21. Announcement on Filed Generative AI Services in Guangdong Province

    Source: Guangdong Cyberspace Administration

    
    

22. Chongqing Pilot Free Trade Zone Releases Its First Case Applying the Negative List for Outbound Data Transfers (Changan Automobile)

    Source: Chongqing Municipal Commission of Commerce

    
    

1. International: The Organisation for Economic Co-operation and Development (OECD) Releases the Policy Paper Artificial Intelligence and Personal Finance

   Source: OECD

   https://www.oecd.org/en/publications/artificial-intelligence-and-personal-finance_2858fdf4-en.html

   
   

2. European Union:

1. The European Commission Publishes Implementation Guidance for the Cyber Resilience Act

   Source: European Commission

   https://digital-strategy.ec.europa.eu/en/library/commission-publishes-new-guidance-support-timely-cyber-resilience-act-implementation

   
   

2. The Digital Omnibus on AI (Regulation (EU) 2026/1744) Is Published in the Official Journal of the European Union and Enters into Force on July 27

   Source: EUR-Lex

   https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ%3AL_202601744

   
   

3. The Council Gives Final Approval to Reinstate the Temporary Framework for Voluntary Detection of Online Child Sexual Abuse Material

   Source: Council of the European Union

   https://www.consilium.europa.eu/en/press/press-releases/2026/07/23/fighting-child-sexual-abuse-online-interim-measure-protecting-children-to-be-reinstated/

   
   

4. ENISA Publishes Cybersecurity Procurement Guidance for Healthcare Institutions

   Source: ENISA

   https://www.enisa.europa.eu/news/first-steps-forward-for-the-implementation-of-the-health-action-plan

   
   

5. The European Commission Publishes Guidelines on the Transparency Obligations under Article 50 of the AI Act

   Source: European Commission

   https://digital-strategy.ec.europa.eu/en/library/guidelines-transparency-obligations-providers-and-deployers-ai-systems

   
   

6. In Case C-209/23, RRC Sports, the Court of Justice of the European Union Rules that FIFA Rules Requiring Disclosure and Publication of All Sanctions Imposed on Agents or Their Clients, Among Other Matters, Fail to Satisfy the Requirements for Processing Based on Legitimate Interests under Article 6(1)(f) GDPR

   Source: EUR-Lex

   https://eur-lex.europa.eu/legal-content/EN/SUM/?uri=celex%3A62023CJ0209

   
   

7. The European Commission Preliminarily Finds that the “Addictive Design” of Instagram and Facebook Breaches the DSA

   Source: European Commission

   https://ec.europa.eu/commission/presscorner/api/files/document/print/en/ip_26_1579/IP_26_1579_EN.pdf

   
   

8. The General Court of the European Union Dismisses All of Apple’s Claims Challenging Its Designation as a “Gatekeeper” under the DMA

   Source: Court of Justice of the European Union

   https://curia.europa.eu/site/upload/docs/application/pdf/2026-07/cp260096en.pdf

   
   

9. The Court of Justice of the European Union Upholds a Fine of Approximately EUR 4.1 Billion in the Google Android Antitrust Case

   Source: Court of Justice of the European Union

   https://curia.europa.eu/site/upload/docs/application/pdf/2026-07/cp260093en.pdf

   
   

10. The European Commission Fines AliExpress EUR 550 Million under the DSA

    Source: European Commission

    https://digital-strategy.ec.europa.eu/en/news/commission-fines-aliexpress-eu550-million-breaching-digital-services-act

    
    

11. The European Commission Fines Google a Total of EUR 890 Million under the DMA

    Source: European Commission

    https://digital-strategy.ec.europa.eu/en/news/commission-fines-google-eu890-million-breaches-digital-markets-act

    
    

12. The European Commission Preliminarily Finds that TikTok Failed to Ensure the Safety of Minors’ Accounts, in Breach of the Digital Services Act (DSA)

    Source: European Commission

    https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1679

    
    

3. United States:

1. The FTC, Together with Utah and California, Sues Hims & Hers over Deceptive and Unlawful Privacy Practices

   Source: Federal Trade Commission (FTC)

   https://www.ftc.gov/news-events/news/press-releases/2026/07/ftc-states-act-against-hims-hers-deceptive-unlawful-privacy-practices

   
   

2. The New York Attorney General and Governor Issue Final Rules under the SAFE for Kids Act

   Source: Office of the New York State Attorney General

   https://ag.ny.gov/resources/individuals/consumer-issues/technology/protecting-children-online

   
   

3. The Texas Attorney General Secures a Temporary Injunction Against Discord Requiring Age Verification and Default Safety Protections for Users in the State

   Source: Office of the Texas Attorney General

   https://www.texasattorneygeneral.gov/news/releases/attorney-general-ken-paxton-secures-historic-legal-victory-forcing-discord-protect-texas-children

   
   

4. Senators Introduce the Senior Chatbot Protection Act

   Source: Office of U.S. Senator Jim Justice

   https://www.justice.senate.gov/newsroom/press-releases/senators-justice-kelly-introduce-bipartisan-senior-chatbot-protection-act/

   
   

5. The Chair of the Senate Judiciary Committee Sends a Letter to Meta Regarding Allegations of Whistleblower Retaliation and Child Safety Failures

   Source: U.S. Senate Committee on the Judiciary

   https://www.grassley.senate.gov/imo/media/doc/grassley_to_meta_-_wb_retaliation_cont.pdf

   
   

6. The Governor of New Jersey Signs the FAIR Act Regulating Algorithmic Rent-Setting

   Source: New Jersey Legislature

   https://pub.njleg.gov/Bills/2026/A3500/3497_R1a.HTM

   
   

7. Representatives Introduce the AI Emergency Stop Act

   Source: Office of U.S. Representative Ted Lieu

   https://lieu.house.gov/media-center/press-releases/reps-lieu-and-moran-introduce-bill-require-kill-switch-ai-systems-can

   
   

8. California’s CalPrivacy Launches Its First Sectoral Privacy Audit Targeting Gig-Economy Platforms

   Source: California Privacy Protection Agency (CalPrivacy)

   https://privacy.ca.gov/2026/07/california-privacy-protection-agency-launches-first-sectoral-audit-targets-gig-economy-platforms/

   
   

9. Anthropic Agrees to Pay USD 1.5 Billion to Settle Bartz v. Anthropic

   Source: Bartz v. Anthropic Settlement Website

   https://www.anthropiccopyrightsettlement.com/

   
   

10. News Corp Files Copyright Counterclaims Against Brave Software over the Scraping of News Content for AI Search

    Source: Justia

    https://dockets.justia.com/docket/california/candce/4:2026cv04758/470480

    
    

11. The FTC Orders RentGrow to Pay USD 2.25 Million to Settle Allegations that the Company Violated the Fair Credit Reporting Act and the Federal Trade Commission Act

    Source: Federal Trade Commission (FTC)

    https://www.ftc.gov/news-events/news/press-releases/2026/07/rentgrow-pay-225-million-settle-ftc-allegations-company-violated-fair-credit-reporting-act-ftc-act

    
    

12. Major Amendments to the Connecticut Data Privacy Act Concerning Scope, Sensitive Personal Data, Automated Profiling, Privacy Notices, Consumer Rights, and Protection of Minors’ Data Take Effect on July 1, 2026

    Source: Connecticut General Assembly

    https://cga.ct.gov/2025/sum/pdf/2025SUM00113-R02SB-01295-SUM.pdf

    
    

13. Apple Sues OpenAI and Two Former Employees for Alleged Trade Secret Theft

    Source: CourtListener

    https://www.courtlistener.com/docket/73602437/apple-inc-v-liu/

    
    

4. United Kingdom: The ICO Fines Two Home-Improvement Companies a Total of GBP 370,000 for Unlawful Marketing Calls Targeting Vulnerable Individuals

   Source: Information Commissioner’s Office (ICO)

   https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/07/two-home-improvement-companies-fined-370-000-for-nuisance-calls-targeting-vulnerable-people/

   
   

5. South Korea:

1. The Personal Information Protection Commission Sanctions KT over a Personal Information Breach and Imposes a Fine of KRW 53.979 Billion

   Source: Personal Information Protection Commission (PIPC)

   https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=12349

   
   

2. The Korea Media and Communications Commission Proposes Amendments to Subordinate Regulations Governing Fines for Illegal Spam, with a Maximum Fine of 6% of Relevant Revenue

   Source: Korea Media and Communications Commission

   https://www.kmcc.go.kr/user.do?mode=view&page=A05030000&dc=K05030000&boardId=1113&cp=1&nop=10&boardSeq=69230

   
   

3. The Personal Information Protection Commission Sanctions TikTok and Apple over Advertising Behavioral Data and Cross-Border Transfers

   Source: Personal Information Protection Commission (PIPC)

   https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=12330

   
   

4. The Personal Information Protection Commission Issues Privacy Guidelines for AI Transformation in the Public Sector

   Source: Personal Information Protection Commission (PIPC)

   https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=12307

   
   

5. The Personal Information Protection Commission Extends the Right to Request Personal Information Transmission to the Employment and Education Sectors

   Source: Personal Information Protection Commission (PIPC)

   https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS074&mCode=C020010000&nttId=12266

   
   

6. The Personal Information Protection Commission Clarifies Rules on Data Portability and Data Scraping

   Source: Personal Information Protection Commission (PIPC)

   https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS210&mCode=C020020000&nttId=12274

   
   

7. The Personal Information Protection Commission Issues Draft Amendments to the Public Notice on the Designation and Recognition of Experience of Chief Privacy Officers (CPOs)

   Source: Personal Information Protection Commission (PIPC)

   https://www.pipc.go.kr/np/cop/bbs/selectBoardArticle.do?bbsId=BS061&mCode=C010010000&nttId=12244

   
   

6. France:

1. CNIL Clarifies Compliance Rules Applicable to Email Tracking Pixels

   Source: French Data Protection Authority (CNIL)

   https://www.cnil.fr/fr/faq-recommandation-pixels-courriers-electroniques

   
   

2. The French Joint Parliamentary Committee Submits a Common Text and Report on the Bill to Protect Minors from Risks Associated with the Use of Social Networks

   Source: French National Assembly

   https://www.assemblee-nationale.fr/dyn/17/textes/l17b3069_texte-adopte-commission

   
   

3. CNIL and CIANum Jointly Publish an Exploratory Paper on Agentic AI and Personal Data Protection

   Source: French Data Protection Authority (CNIL)

   https://www.cnil.fr/fr/ia-agentique-cnil-cianum-note

   
   

4. CNIL Publishes Employee-Monitoring Compliance Guidance, Specifies Three Cumulative Conditions, and Rejects Continuous Keyboard Monitoring

   Source: French Data Protection Authority (CNIL)

   https://www.cnil.fr/fr/controle-de-lactivite-des-personnes-employees

   
   

7. Germany: The Federal Office for Information Security Publishes Guidance on IT Security Requirements for Medical Practices

   Source: Federal Office for Information Security (BSI)

   https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2026/260714_Cyberangriffe_auf_Praxen.html

   
   

8. Italy:

1. The Italian Data Protection Authority Fines Lusha EUR 2 Million for Unlawful Data Monitoring and Sale

   Source: Italian Data Protection Authority (Garante)

   https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10275230

   
   

2. The National Cybersecurity Agency (ACN) Updates Its FAQs on Supply-Chain Security Measures for NIS 2 Entities

   Source: Italian National Cybersecurity Agency (ACN)

   https://www.acn.gov.it/portale/w/aggiornate-le-faq-acn-sulle-misure-di-sicurezza-per-la-supply-chain-dei-soggetti-nis

   
   

3. The Italian Data Protection Authority Fines Four Companies a Total of EUR 7.72 Million over Automated Credit-Scoring Systems for Energy Contracts

   Source: Italian Data Protection Authority (Garante)

   https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10273902

   
   

4. The Garante Fines Wind Tre S.p.A. EUR 1,715,600 for Inadequate Security Measures Resulting in Unauthorized Access and Personal Data Leakage

   Source: Italian Data Protection Authority (Garante)

   https://www.gpdp.it/home/docweb/-/docweb-display/docweb/10272004

   
   

5. The Data Protection Authority Fines Character.AI EUR 158,000 and Requires Stronger Age Verification for Minors

   Source: Italian Data Protection Authority (Garante)

   https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/10269594

   
   

9. Poland：

1. The President of Poland Signs the Act on Artificial Intelligence Systems

   Source: Polish Ministry of Digital Affairs

   https://www.gov.pl/web/cyfryzacja/ustawa-o-systemach-ai--bezpieczny-rozwoj-sztucznej-inteligencji-w-polsce

   
   

2. The Data Governance Act Enters into Force, Implementing the EU Data Governance Act

   Source: Polish Personal Data Protection Office (UODO)

   https://uodo.gov.pl/pl/138/4505

   
   

3. The Polish Financial Supervision Authority Issues Recommendations to Financial Market Participants on Cybersecurity Risks from Frontier AI

   Source: Polish Financial Supervision Authority (KNF)

   https://www.knf.gov.pl/aktualnosci?articleId=99168&p_id=18&page=1&perPage=10

   
   

10. Spain:

1. AEPD Publishes a Technical Note on Data Accuracy and Minimization Principles in AI Processing

   Source: Spanish Data Protection Agency (AEPD)

   https://www.aepd.es/prensa-y-comunicacion/notas-de-prensa/aepd-analiza-calidad-exactitud-y-minimizacion-de-datos-personales-en-tratamientos-con-ia

   
   

2. The Data Protection Authority Fines TELCOM BUSINESS SOLUTIONS EUR 25,000 for Failing to Conduct a Data Protection Impact Assessment for Biometric Processing

   Source: Spanish Data Protection Agency (AEPD)

   https://www.aepd.es/documento/ps-00479-2025.pdf

   
   

3. The Data Protection Authority Publishes Guidance on the Use of Smart Glasses

   Source: Spanish Data Protection Agency (AEPD)

   https://www.aepd.es/prensa-y-comunicacion/blog/buenas-practicas-si-vas-a-usar-gafas-de-sol-inteligentes-este-verano

   
   

11. Japan: The House of Councillors Passes a Bill Partially Amending the Act on the Protection of Personal Information

    Source: House of Councillors, National Diet of Japan

    https://www.sangiin.go.jp/japanese/joho1/kousei/gian/221/meisai/m221080221054.htm

    
    

12. Singapore:

1. The Monetary Authority of Singapore and the Association of Banks in Singapore Establish a Taskforce to Address AI-Driven Cyber and Technology Risks

   Source: Monetary Authority of Singapore

   https://www.mas.gov.sg/news/media-releases/2026/mas-and-abs-establish-taskforce-to-strengthen-cyber-and-technology-resilience

   
   

2. The Ministry of Digital Development and Information Issues Regulations on Providers Responsible for the Cybersecurity of Critical Information Infrastructure Owned by Third Parties

   Source: Singapore Statutes Online, Attorney-General’s Chambers

   https://sso.agc.gov.sg//SL-Supp/S490-2026/Published/20260710?DocDate=20260710

   
   

13. Australia:

1. The Office of the Australian Information Commissioner (OAIC) Publishes an Updated Guide to Assessing the Privacy Risks of Facial Recognition Technology in Retail Settings

   Source: Office of the Australian Information Commissioner (OAIC)

   https://www.oaic.gov.au/__data/assets/pdf_file/0025/266335/Facial-recognition-technology-A-guide-to-assessing-the-privacy-risks-July-2026.pdf

   
   

2. The Australian Communications and Media Authority (ACMA) Fines TAB AUD 2.7 Million for Telemarketing and Spam Violations

   Source: Australian Communications and Media Authority (ACMA)

   https://www.acma.gov.au/publications/2026-07/report/spam-and-telemarketing-investigation-reports-infringement-notices-and-enforceable-undertaking-tabcorp-holdings-limited-tab

   
   

3. Non-Bank Lenders Join the Consumer Data Right Regime as the Next Implementation Stage Commences

   Source: Australian Competition and Consumer Commission (ACCC)

   https://www.accc.gov.au/media-release/non-bank-lenders-join-consumer-data-right-as-next-stage-commences

   
   

14. Brazil:

1. The National Data Protection Authority (ANPD) Publishes the English Version of the Generative Artificial Intelligence Report

   Source: Brazilian National Data Protection Authority (ANPD)

   https://www.gov.br/anpd/pt-br/assuntos/noticias/anpd-releases-english-version

   
   

2. The National Data Protection Authority Announces the First Results of the AI Regulatory Sandbox

   Source: Brazilian National Data Protection Authority (ANPD)

   https://www.gov.br/anpd/pt-br/assuntos/noticias/publicados-primeiros-resultados-do-sandbox-regulatorio-em-inteligencia-artificial

   
   

15. Netherlands: The Dutch Data Protection Authority Publishes GDPR Guidance and Implementation Tools for Generative AI

    Source: Dutch Data Protection Authority

    https://autoriteitpersoonsgegevens.nl/actueel/ap-helpt-ontwikkelaars-en-organisaties-met-nieuwe-avg-richtlijnen-voor-generatieve-ai

    
    

16. Norway:

1. The Norwegian Data Protection Authority Publishes Guidance on the Use of Smart Glasses

   Source: Norwegian Data Protection Authority

   https://www.datatilsynet.no/personvern-pa-ulike-omrader/overvaking-og-sporing/bruk-av-smarte-briller/

   
   

2. The Norwegian Data Protection Authority Updates Its Guidance on the Right of Access

   Source: Norwegian Data Protection Authority

   https://www.datatilsynet.no/aktuelt/aktuelle-nyheter-2026/om-retten-til-innsyn/

   
   

17. Latvia: The Data State Inspectorate Publishes Guidance on Employees’ Use of AI to Process Personal Data

    Source: Data State Inspectorate (DVI)

    https://www.dvi.gov.lv/lv/jaunums/dviskaidro-vai-organizacijas-darbinieks-drikst-ievadit-savus-vai-citu-cilveku-datus-maksliga-intelekta-rika

    
    

18. Slovenia: The Information Commissioner Issues an Opinion on Processing Real Property Owners’ Data for Road-Safety Purposes

    Source: Information Commissioner of the Republic of Slovenia

    https://www.ip-rs.si/mnenja-zvop-2/uporaba-osebnih-podatkov-lastnikov-nepremi%C4%8Dnin-za-namen-zagotavljanja-prometne-varnosti-1783506894

    
    

19. Luxembourg: The National Commission for Data Protection (CNPD) Publishes Its 2025 Annual Report

    Source: National Commission for Data Protection (CNPD)

    https://cnpd.public.lu/fr/actualites/national/2026/07/presentation-ra-2025.html

    
    

20. Isle of Man: The Information Commissioner Publishes the 2025/26 Annual Report

    Source: Isle of Man Information Commissioner

    https://www.inforights.im/organisations/latest-news-updates/2026/jul/ico-annual-report-202526/

    
    

21. India: The Securities and Exchange Board of India (SEBI) Fines CDSL INR 10 Million over a 2022 Malware Attack

    Source: Securities and Exchange Board of India (SEBI)

    https://www.sebi.gov.in/enforcement/orders/jul-2026/adjudication-order-in-the-matter-of-central-depository-services-india-limited-malware-attack-on-november-18-2022_102967.html

    
    

22. Uganda: The Ministry of Information and Communications Technology and National Guidance Publishes the Revised National Information Security Framework 2026

    Source: National Information Technology Authority–Uganda (NITA-U)

    https://www.nita.go.ug/news-updates/hon-lumumba-launches-updated-national-information-security-framework-nisf-2026

    
    

23. Industry: OpenAI Discloses that a Model Escaped Containment During a Safety Evaluation and Accessed Hugging Face Production Infrastructure

    Source: OpenAI

    https://openai.com/index/hugging-face-model-evaluation-security-incident/