Key highlights of our 2026 results by season

We continue producing real change by challenging governments and corporations that use data and technology to exploit us.

2026 has been intense! And we have achieved some wins that we are excited to share with you.

This summer, we found evidence that our research on period-tracking apps is shaping the design of new similar products, helped secure stronger protections for workers in a new Convention on decent work in the platform economy, prompted Europol to provide greater transparency about its data-processing systems, and deepened our understanding of the growing militarisation of technology.

Below is a quick overview of the main results we produced or contributed towards this summer.

Summer 2026

Convention concerning decent work in the platform economy sets new standards for workers protection

Following years of advocacy by trade unions, platform worker organisations and civil society, delegates at the 114th International Labour Conference (ILC) adopted the Convention concerning decent work in the platform economy. It is a legally binding international treaty that sets minimum standards of protection and addresses the impact of technology on platform workers.

The Convention recognises the need for transparency, accountability, and rights over personal data to reset the rules of the game. It also covers matters like employment status, safe working conditions, social security and fair pay.

Through our joint advocacy with other organisations, we helped ensure that the Convention retained necessary provisions around Automated Decision Making and data protection, and secured more labour rights for platform workers.

At the same time, we remain concerned by some of its provisions and will be continuing to advocate for higher standards as the convention gets ratified and implemented by governments.

What it means in short: Our joint advocacy contributed to better standards on decent work in the platform economy. Even as the Convention reflects some of our key demands, we continue to push for more safeguards.

Europol pushed to shed the light on their operations

Earlier this year, our partner researchers published their report on Europol’s obscure data-processing and analysis environments. Following their report, Europol reacted with a formal response and published a dedicated resource containing new information and clarifications, but contesting some of the report’s findings.

We welcome Europol’s efforts to clarify aspects of its data-processing environments, including the Computer Forensic Network (CFN) and the Internet Facing Operational Environment (IFOE). At the same time, important questions remain regarding whether these systems operated with adequate data protection and security safeguards, were subject to sufficient oversight, and remained within the scope of their intended purpose.

What it means in short: We managed to get some accountability from Europol on their data practices. However, significant questions about oversight, safeguards, and accountability still remain. We will continue to advocate for greater transparency and stronger protections.

A new menstruation app is based on our tech research findings

In 2019 PI conducted a technical analysis of several menstruation apps to examine their data sharing practice. Our research exposed extensive sharing of sensitive personal data with third parties, including Facebook, by some of the most popular menstruation apps. In 2020, our follow-up assessment showed that most of the menstruation apps we tested either made changes in their data sharing practices, or launched internal investigations.

Recently, we discovered that a new menstruation tracking app launched in early 2026 that appears to be directly informed by our research and recommendations. In describing the app, its developers explicitly refer to our analysis and mention that it “ships no ad SDKs” and is “built privacy-first”. While we have not yet tested the app ourselves, it is encouraging to see the standards we advocated for reflected in the design and marketing of new products.

What it means in short: PI’s innovative research and advocacy are able to set new standards for the companies and directly shape their products design.

Better understanding of the Militarisation of tech process

Following our joint work with a number of partners on the Militarisarion of Tech (MoT), together this summer we exposed companies involved in the production of military tech, examined MoT in the South-West Asia and North Africa region, explored Gendered Impacts of the Militarisation of Data-Intensive Systems, explained the deepening of convergence between tech giants and arms producers and the new space race. Also, we shared our positions at the UN level taking part in the UN Informal Exchanges on Artificial Intelligence in the Military Domain and its Implications.

What it means in short: Boundaries between consumer and military technology are blurring. We build evidence to develop safeguards that challenge this trend.

Spring 2026

France’s highest administrative court confirms fine against Criteo for GDPR violations

On 22 June 2023, following our complaint, the French data protection authority (CNIL) imposed a €40 million fine on Criteo, one of the world’s largest AdTech companies, for unlawfully collecting personal data.

In the same year, Criteo appealed the decision before the Conseil d’État (France’s highest administrative court).

In March 2026, the Conseil d’État rejected the appeal and confirmed the regulator’s decision. In its decision the Court reiterated that pseudonymised identifiers may constitute personal data under the GDPR where individuals remain identifiable.

What it means in short: AdTech companies are accountable for privacy violations.

UK Government takes steps to regulate secret facial recognition searches

Following advocacy undertaken by PI and Big Brother Watch, in 2025 the UK Home Office published new guidance on “Handling facial image search requests from law enforcement organisations”; and deployed a consultation to develop a new legal framework.

In 2026, we’ve seen further results of our action.

On 8 April 2026, the UK Parliament’s Office of Science and Technology published their Facial recognition technology in policing report, which references our work and summarises our concerns about FRT.

What it means in short: Although the UK Government has taken steps to regulate use of facial recognition technology by law enforcement agencies, we remain committed to challenging this problematic practice.

New steps on better regulation of FRT use in Brazilian schools
Research by our partner InternetLab has informed a Brazilian proposed law to regulate facial recognition and other biometric technologies in schools.

In March, the Brazilian Ministry of Education also published a Framework for the Development and Responsible Use of Artificial Intelligence in Education. The document reflects some recommendations from InternetLab and discourages the use of FRT in educational settings.

What it means in short: Facial recognition technology in schools should be banned. PI partner InternetLab’s advocacy drove practical action by governmental bodies in Brazil.

Our demands in the new release by Massive Attack

In April 2026, the legendary English trip hop collective Massive Attack released its new single Boots on the Ground.

In this anti-war, anti-authoritarian song, the band criticises excessive militarisation of abusive state power. The official video features Privacy International as one of the sources that inspired the song’s manifesto.

What it means in short: We are proud to be a trusted source of information on data and technology for artists and cultural content producers around the world.

Please consider supporting us as we continue our work to protect privacy and human rights around the world.