Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
68 incidents closest to “Federato Control Tower” · matched on meaning · public reporting
The system incorrectly identified a vehicle as stolen, leading to a traffic stop and detention of the driver at gunpoint.
1 source article · read the reporting →
The Civil Aviation Authority trialled facial recognition technology at Wellington Airport to count passengers and measure queue wait times. The Privacy Commissioner expressed serious concerns, calling the use of facial recognition unnecessary and a privacy risk. The Authority stated it has strict measures to protect privacy.
8 source articles · read the reporting →
The Flock camera system photographed and tracked vehicles and individuals, generating millions of images and license plate data for law enforcement use.
1 source article · read the reporting →
The Italian data protection authority ordered a temporary ban on ChatGPT, alleging that OpenAI violated the GDPR by collecting personal data without a legal basis, processing data inaccurately, and failing to verify users' ages. The regulator also cited a data breach that exposed user conversations and payment information. OpenAI disabled access in Italy but stated it believes it complies with privacy laws, and has 20 days to respond or face fines.
5 source articles · read the reporting →
The system recorded and tracked the locations of vehicles and their owners without consent.
1 source article · read the reporting →
The Galileu AI system, developed by the Tribunal Regional do Trabalho da 4ª Região (TRT-RS) and nationalised by the Conselho Superior da Justiça do Trabalho (CSJT), detected a prompt injection attempt in a petition filed at the 3rd Labour Court of Parauapebas, Pará. The system alerted the magistrate, who reviewed the content and made a decision based on human verification, in line with judicial AI supervision requirements. The court reported that the system prevented the malicious content from being processed and highlighted the importance of institutional AI tools with security measures.
1 source article · read the reporting →
Flock Safety camera misread a license plate character, triggering a stolen vehicle alert that led Toledo police to conduct a felony traffic stop without verification, during which an innocent driver was bitten by a police dog, injured, and wrongfully arrested.
1 source article · read the reporting →
Evolv, a company selling AI-powered weapons detection systems, has been ordered by the FTC to stop making misleading claims about its Evolv Express product. The FTC alleged that the technology is essentially a metal detector with unproven AI, and that Evolv falsely claimed it could detect guns while ignoring harmless items. A pilot in New York City subways resulted in over 100 false positives and no guns detected. The settlement requires Evolv to allow educational customers to cancel their contracts and prohibits further misrepresentations.
2 source articles · read the reporting →
The Bank of Italy has reported the circulation of deepfake videos and articles falsely depicting Governor Fabio Panetta endorsing investment platforms, likely as part of a scam. The central bank has filed a complaint with the judicial authority and warned the public not to trust or share such content. The deepfakes, created using artificial intelligence, are entirely fabricated and do not correspond to reality.
4 source articles · read the reporting →
noyb filed a complaint against Ryanair with the Spanish Data Protection Authority (AEPD) on 27 July 2023. A customer who booked a Ryanair flight through online travel agency eDreams was required to undergo a facial recognition verification process or go to the check-in counter more than two hours before departure. The customer was charged a small fee for the verification. Ryanair outsources the facial recognition to GetID. noyb alleges that the process violates GDPR because consent is not valid and the purpose is to discourage bookings through third-party agents.
10 source articles · read the reporting →
Transgender and gender nonconforming travellers in the US allege that Transportation Security Administration full-body scanners, which require officers to select a binary gender, routinely flag their bodies as anomalies, leading to humiliating and invasive pat-downs. Travellers including Olivia, Terra Fox and Allister McGuire describe being pressured to expose their genitals or strip in private rooms after alarms, with one woman saying she was forced to show her penis to female officers who then cleared her. The TSA says it is committed to treating all travellers equally and has introduced new transgender awareness training, but internal complaint data shows a disproportionate number of civil rights complaints relate to screening of transgender people. ProPublica’s review of 174 traveller accounts found that most did not file a formal complaint, often from fear of outing themselves or not knowing how.
1 source article · read the reporting →
Threat actors used Gamma, an AI-powered presentation builder, to host a page that redirected recipients to a fake Microsoft SharePoint login portal. Emails sent from compromised legitimate accounts passed authentication checks, while a Cloudflare Turnstile blocked automated security scanners. An adversary-in-the-middle framework validated credentials in real time and captured session cookies, enabling multi-factor authentication bypass on Microsoft accounts. Abnormal reported the campaign on 15 April 2025.
7 source articles · read the reporting →
The Royal Free London NHS Foundation Trust published an audit into its use of the Streams app, following an investigation by the Information Commissioner's Office (ICO) in July 2017. The Streams app alerts clinicians to patients at risk of acute kidney injury. The audit, conducted by Linklaters, concluded that the trust's use of Streams was lawful and complied with data protection laws, although areas for improvement were identified. The ICO later recognised that the trust had completed all required actions.
10 source articles · read the reporting →
West Midlands Police used Microsoft Copilot to search for information when preparing a report for the Safety Advisory Group about the Aston Villa v Maccabi Tel Aviv fixture. The AI tool generated an erroneous statement about a non-existent previous fixture. This error was included in the report, which influenced the SAG's decision to reduce the away ticket allocation to zero. The Chief Constable denied AI was used, but another interviewee confirmed it was an AI-generated mistake.
2 source articles · read the reporting →
Facebook hired contractors to listen to and transcribe select voice conversations made through its Messenger platform, without users' knowledge, in order to improve artificial intelligence. The practice was exposed by Bloomberg, prompting Facebook to pause the program. The Irish Data Protection Commission stated it was seeking details from Facebook on compliance with GDPR.
10 source articles · read the reporting →
A year-long pilot project of facial recognition technology was carried out at Berlin-Südkreuz train station from August 2017 to July 2018. The project was initiated by the German Ministry of the Interior, federal and state police, and supported by Deutsche Bahn. The pilot became a catalyst for media attention, spurring discourse on the efficiency and legitimacy of surveillance technology.
10 source articles · read the reporting →
The Italian Data Protection Authority (Garante) ordered the Municipality of Como to cease its use of a facial recognition system installed in Parco Tokamakhi near the main railway station. The system was intended to identify people under investigation or reported missing, and to detect suspicious behaviour. The Garante found that the municipality lacked a specific legal basis under national law for collecting and storing biometric data, and issued an injunction to conform to the law.
9 source articles · read the reporting →
The AI-generated court filing contained fabricated case law, leading to a monetary sanction against the party represented by the lawyer.
1 source article · read the reporting →
The Israeli military deployed Smash Hopper remote-controlled gun turrets in the West Bank. The turrets fire stun grenades, less-than-lethal bullets, and tear gas at Palestinian protesters without warning. The systems were observed at Al-Aroub refugee camp and Hebron in October 2022. The Smash Hopper is produced by Smart Shooter.
10 source articles · read the reporting →
The Italian Data Protection Authority (Garante) fined Foodinho S.r.l., a subsidiary of GlovoApp23, €2.6 million for privacy violations related to its algorithmic management of food delivery riders. The Garante found that the company's digital platform used algorithms to assign orders and rate riders without adequate transparency, human oversight, or the right to contest decisions. The system allegedly penalized riders who did not accept orders quickly, leading to reduced work opportunities and exclusion from the platform. The Garante ordered Foodinho to implement corrective measures within 60 days and to overhaul the algorithms within 90 days.
10 source articles · read the reporting →
The system generated fake legal citations that were included in a court filing, potentially misleading the court and prejudicing the client's case.
1 source article · read the reporting →
The Spanish data protection agency AEPD fined Plastic Forte, a plastics manufacturer in Alicante, €20,000 for using facial recognition to record employees' working hours without informing them. A worker requested information about his personal data and discovered the biometric processing. The company initially argued it was only for time tracking but later acknowledged responsibility, resulting in a reduced fine of €12,000. The AEPD deemed facial recognition for time control as highly intrusive and requiring prior impact assessment.
7 source articles · read the reporting →
In 2016, the Canada Border Services Agency (CBSA) secretly tested facial recognition technology on millions of travellers at Toronto Pearson Airport without their knowledge. The system, supplied by Face4 Systems, matched faces against a database of previously deported individuals. The CBSA stated that no one was deported as a result of the pilot, and the technology was removed after six months. Privacy advocates raised concerns about lack of consent, transparency, and potential racial bias.
8 source articles · read the reporting →
The AI system generated fake legal citations that were submitted to the court, resulting in a fine for contempt.
1 source article · read the reporting →
