There’s a particular kind of own goal where you not only miss the net, you kick the ball directly to the opposition striker. Washington’s AI export controls are shaping up to be one of those.

The short version: Anthropic and others pushed for export restrictions on frontier AI models, ostensibly for safety reasons. Within weeks, labs in Tokyo and Beijing were shipping products with a pitch they could not have written better themselves. Sovereign AI. No export control risk. Your access won’t vanish overnight because someone in Washington had a bad morning. That wasn’t a compelling sales angle before the ban. The ban made it one.

There’s a piece going around arguing that governments are breaking the internet in the name of child safety, and that forcing ISPs to ship routers with default family DNS filters would be a far cleaner solution. It’s a reasonable technical argument. The problem is it’s solving for the stated goal, and a lot of people are skeptical that the stated goal is the actual goal.

That scepticism is fair. When a government says “we need age verification on adult websites,” they are also describing a system that requires you to hand over identifying documents to visit legal content. The data gets collected. The data gets stored. The data gets breached, or sold, or handed to another agency under a different justification eighteen months later. We’ve seen this pattern enough times that treating the stated intention as the real one requires a certain generosity of spirit that the evidence doesn’t support.

I’ve been following the age verification debate for a while now, and honestly, every time I think it can’t get more dystopian, something new comes along to prove me wrong. This week’s revelation about Persona – the age verification vendor that’s been exposed for running what essentially amounts to a comprehensive surveillance operation – is both shocking and entirely predictable.

For those who haven’t heard, researchers discovered that Persona’s system doesn’t just verify your age. Oh no, that would be far too reasonable. Instead, it performs 269 distinct verification checks, runs facial recognition against watchlists and politically exposed persons, screens “adverse media” across 14 categories including terrorism and espionage, and assigns risk and similarity scores. They collect and can retain for up to three years your IP addresses, browser fingerprints, device fingerprints, government ID numbers, phone numbers, names, faces, and a whole battery of “selfie” analytics.

I’ve been sitting here this morning, staring at my phone in disbelief. The Federal Trade Commission – you know, the agency supposedly tasked with protecting consumers and maintaining fair competition – is now apparently in the business of telling Apple News which political outlets it should promote. Specifically, they want more Fox News and Breitbart stories pushed to users.

Let me just say that again for those in the back: a government agency is demanding a private company promote specific political content.

I’ve been watching the AI arms race unfold with a mixture of fascination and dread for a while now. Every week brings another announcement about some massive AI model that’s supposedly going to change everything, backed by billions in funding and wild promises about achieving artificial general intelligence. It’s exhausting, frankly. So when I came across India’s latest budget announcement committing $90 billion to AI infrastructure, I expected more of the same – another country trying to build their own GPT-killer and join the race to the bottom.

The tech world’s been buzzing lately about Google’s latest move to charge developers for app verification outside the Play Store ecosystem. What started as a promise of openness and choice in the Android world is rapidly becoming another corporate cash grab, and frankly, it’s getting under my skin.

Google’s decision to implement a tiered verification system for Android developers feels like a betrayal of everything the platform once stood for. Sure, they’re keeping a “free” tier for hobbyists and students, but with undefined installation limits and heavy encouragement to upgrade to the paid tier. The paid verification will cost developers $25 - the same as Play Store registration - just for the privilege of distributing apps outside Google’s walled garden.

The news about Apple pulling the ICEBlock app from their store has been doing the rounds this week, and frankly, it’s got me thinking about how easily our digital tools can become political weapons. For those who missed it, ICEBlock was an app designed to alert users about Immigration and Customs Enforcement (ICE) activity in their area. The new Attorney General, Pam Bondi, claimed it put ICE agents at risk, the developer pushed back, and now it’s gone from the App Store.

Reading about Malaysia’s recent demands for telcos to hand over detailed phone records and internet usage data sent a chill down my spine. Not just because it’s happening in our neighbouring region, but because it feels like watching history repeat itself with frightening predictability.

The news transported me back to 2013 when Edward Snowden’s revelations about mass surveillance programs shook the world. Back then, many of us in the tech industry suspected something was amiss, but the scale of it was still shocking. Now, sitting in my home office and reading about Malaysia’s move, I’m struck by how familiar this playbook has become.

The news of TikTok’s €530 million fine in Ireland for data protection violations has been making waves across tech circles this week. Working in DevOps, I’ve spent countless hours ensuring our systems comply with data protection regulations, so this story particularly resonates with me.

Remember when we used to think data privacy was just about keeping our credit card numbers safe? Those days seem quaint now. Today, we’re dealing with sophisticated data harvesting operations that would make George Orwell’s head spin. TikTok’s latest fine for transferring user data to China is just another chapter in this ongoing digital sovereignty saga.

The news coming out of Spain about imposing hefty fines for unlabelled AI-generated content has caught my attention. Working in tech, I’ve watched the AI landscape evolve from clunky chatbots to today’s sophisticated content generators, and this development feels like a watershed moment.

Spain’s move is bold - requiring clear labelling of AI-generated content or face substantial penalties. It’s refreshing to see a government taking concrete steps rather than just engaging in endless discussions about AI regulation. The enforcement mechanism, linking directly to company bank accounts for verified violations, shows they mean business.

The tech world is buzzing with Apple’s recent decision to pull Advanced Data Protection (ADP) in the UK, following pressure from the British government. This move has sparked intense discussions about privacy, government overreach, and the future of digital security.

Let’s be clear about what’s happening here. Apple didn’t implement a backdoor - they simply removed the enhanced encryption feature for UK users. While this isn’t ideal, it’s arguably better than compromising the entire encryption system with a government-mandated backdoor. At least now, UK users know exactly where they stand regarding their data security.

Looking at the ongoing discussions about the European Union’s approach to artificial intelligence, there’s an interesting pattern emerging that reminds me of the early days of cloud computing. Back then, many organizations chose to wait and see how things would play out before jumping in. Now, we’re seeing a similar hesitancy with AI, but on a continental scale.

The EU’s current stance on AI seems to be primarily focused on regulation and careful consideration rather than aggressive innovation. While this might appear overly cautious to some, particularly when compared to the rapid developments coming out of the US and China, there’s actually some logic to this approach.

Reading about the US government’s recent approval of $3 billion to remove Chinese telecoms equipment brought back memories of conversations I had with colleagues years ago. Back in 2015, while working on a government contract, we were already discussing the potential risks of foreign-made networking equipment. Many dismissed these concerns as paranoid, but here we are.

The cybersecurity landscape has shifted dramatically over the past decade. Working in IT, I’ve watched the gradual evolution from “buy whatever’s cheapest” to implementing zero-trust architectures and carefully vetting hardware suppliers. It’s fascinating how what was once considered conspiracy theory territory has become mainstream security policy.

The recent pushback from OpenAI employees against military contracts has sparked an interesting debate in tech circles. While scrolling through various discussion threads during my lunch break, the mix of perspectives caught my attention - particularly how quickly people jump to “Skynet” references whenever AI and military applications converge.

Here’s the thing - working in tech for over two decades has taught me that reality rarely matches Hollywood’s dramatic portrayals. The concerns about AI in military applications are valid, but they’re far more nuanced than killer robots taking over the world. The real issues involve accountability, transparency, and the ethical implications of automated decision-making in conflict situations.

The recent clash between Cloudflare and EU regulators has sparked an important conversation about digital privacy that hits close to home. While sipping my morning coffee and scrolling through tech news at my favourite Brunswick café, this story caught my eye, particularly because it reflects a broader struggle we’re all facing in the digital age.

Remember the days when the internet felt like the wild west? Those simpler times when we didn’t have to worry about every click being monitored? Now, we’re dealing with an increasingly complex web of surveillance and control, often justified under the banner of fighting piracy and protecting intellectual property.