Liminal members enjoy the exclusive benefit of receiving daily morning briefs directly in their inboxes, ensuring they stay ahead of the curve with the latest industry developments for a significant competitive advantage.
Looking for product or company-specific news? Log in or sign-up to Link for more detailed news and developments.
Here are the main industry highlights of this week impacting identity and fraud, cybersecurity, trust and safety, financial crimes compliance, and privacy and consent management.
🪄Innovation and New Technology Developments
Italy Modernizes Civil Services and Digital Wallet with National Integration and Offline Access
Italy is advancing its digital identity infrastructure with significant updates to its national digital services. Over 700 municipalities have joined the centralized National Archive of Civil Status (ANSC), replacing paper-based record-keeping with a unified digital platform for civil documents. Synchronization with the National Registry of the Resident Population ensures data accuracy and streamlines administrative workflows. Concurrently, Italy’s “IO” app now supports offline access to its digital wallet, allowing users to retrieve essential documents like driving licenses and health cards without an internet connection. With nearly 90 million digital identities issued and robust growth in digital document adoption, Italy is ahead of its National Recovery and Resilience Plan targets. (Source)
African Nations Advance Digital Identity and Governance to Promote Security and Inclusion
Nigeria, Somalia, South Africa, and Eswatini are advancing digital identity and governance initiatives as part of broader digital transformation efforts across Africa. Nigeria is using biometrics and digital wallets to distribute aid more efficiently and securely, aiming to curb corruption and preserve recipients’ dignity. Somalia has implemented a U.S.-developed biometric border control system to enhance national security. Meanwhile, South Africa and Eswatini signed a digital cooperation agreement to harmonize ICT policies, expand digital literacy, and collaborate on emerging technologies. These efforts highlight the continent’s growing emphasis on secure, inclusive digital infrastructure. (Source)
Anonybit and SmartUp Launch Decentralized Biometric Identity Solution for Enterprise AI Agents
Anonybit has partnered with AI-native no-code platform @SmartUp to launch a privacy-preserving digital identity solution for AI agents, aimed at enhancing trust and accountability in agent-driven enterprise workflows. The solution leverages Anonybit’s decentralized biometric cloud and token management system to securely authenticate users and authorize actions through identity-bound agents. Supporting multiple biometric modalities, the system ensures compliance, data residency, and quantum-resistant security without centralized data storage. This partnership enables practical deployment of agentic automation in areas like payments and supply chain management, addressing rising concerns around identity and fraud in AI-driven processes. (Source)
South Africa Launches Upgraded Identity Verification System With Faster, More Reliable Access to NPR
South Africa’s Department of Home Affairs has launched an upgraded identity verification platform that allows both government and private sector entities to verify identities against the National Population Register (NPR). Previously plagued by high failure rates due to underinvestment, the new system now handles over 180,000 daily transactions with minimal error and sub-second response times. The justice sector and several private users have already transitioned, benefiting from improved reliability and efficiency. While some users were unprepared for the switch despite prior consultations, the Department is offering a grace period until October to optimize usage and reduce costs, crediting back overpayments based on off-peak verification adjustments. (Source)
đź’° Investments and Partnerships
Leonardo Acquires Axiomatics to Strengthen Global Zero Trust Cybersecurity Strategy
Leonardo, the Italian aerospace and defence company, has acquired Swedish cybersecurity firm Axiomatics AB to bolster its global Zero Trust security capabilities. Axiomatics, established in 2006 and headquartered in Stockholm with operations in North America, specialises in dynamic access control solutions based on the Attribute-Based Access Control (ABAC) model—a fundamental component of Zero Trust cybersecurity architecture. This acquisition is part of Leonardo’s broader strategy to expand its proprietary cybersecurity portfolio and enhance its role in securing digital infrastructure across critical sectors worldwide. The deal, announced on July 9, 2025, is subject to regulatory approvals, including a review by Swedish authorities overseeing foreign investment in the defence sector. (Source)
Didomi Expands Global Privacy Services Through Sourcepoint Acquisition Backed by Marlin Equity
Didomi, a Paris-based data privacy startup, has acquired Sourcepoint to consolidate their consent and compliance services, creating a larger global presence with over 1,700 enterprise clients. Both companies offer tools that help businesses manage user consent for data collection in compliance with privacy laws like GDPR and CPRA. The acquisition, backed by Marlin Equity Partners, follows Didomi’s earlier purchase of Addingwell by Didomi, a server-side tracking firm aimed at enhancing marketing data accuracy and compliance. The combined entity aims to provide a unified privacy infrastructure amid evolving regulations and AI-driven digital advertising. (Source)
Castellum.AI Secures $8.5M Series A to Advance AI-Driven AML Compliance Across Financial Ecosystem
Castellum.AI, a fintech company focused on AI-driven anti-money laundering (AML) compliance, has raised $8.5 million in a Series A funding round led by Curql and supported by several venture firms. The platform uses AI agents to streamline AML and KYC screening processes, aiming to reduce false positives and enhance review efficiency for financial institutions. With the new funds, Castellum.AI will expand its integration with banks, credit unions, and digital asset exchanges, offering compatibility with existing systems to lower switching costs. The firm is also pursuing certification standards for its AI agents, positioning them to support various levels of compliance adjudication. (Source)
Pimloc Raises $5 Million to Scale AI-Powered Video Privacy Platform for Global Expansion
London-based video privacy company PIMLOC has raised $5 million in a funding round led by Amadeus Capital Partners and Edge Ventures to support its global expansion. Pimloc’s Secure Redact platform, which uses AI to automatically anonymize sensitive visual and audio data, has seen over 120% annual growth and is already in use across sectors such as healthcare, law enforcement, and education. The platform has processed nearly half a billion instances of personally identifiable information and integrates with major systems like Microsoft and Milestone. The funding will help Pimloc scale into new regions and sectors amid increasing global demands for video data privacy and compliance. (Source)
⚖️ Policy and Regulatory
Indian Gig Platforms Push for Aadhaar-Based ID Verification to Curb Fraud and Simplify Onboarding
Indian gig-economy startups in sectors like food delivery, ecommerce, and ride-hailing are seeking government approval to use Aadhaar-based identity verification to address fraud and streamline worker onboarding. The Ministry of Electronics and IT (MeitY) has restricted unauthorized use of Aadhaar services, pushing firms to obtain formal permission for legitimate access. Companies such as Protean eGov Technologies and IDfy are positioned to offer compliant biometric and KYC solutions if approvals are granted. These services would allow secure and scalable verification through Aadhaar, potentially replacing illegal methods currently used by some platforms. (Source)
Germany Urges Apple and Google to Remove DeepSeek Over GDPR Violations and Data Transfers to China
Germany’s data protection authority has requested Apple and Google to block the Chinese chatbot app DeepSeek from their app stores, citing unlawful data transfers to China and violations of GDPR. The Berlin Data Protection Commissioner argued that DeepSeek fails to provide adequate safeguards for user data, especially given Chinese authorities’ extensive access rights. The app had already been banned in Italy earlier this year for similar concerns, and investigations are ongoing in several other EU countries. Despite a recent privacy policy update, DeepSeek remains under scrutiny for opaque data retention practices and lack of user protections equivalent to those in the EU. (Source)
Stanford Paper Critiques Age Assurance Laws as Suppressive and Fragmented Regulatory Measures
In a new paper from Stanford Law School, legal scholar Eric Goldman critiques online age assurance laws, arguing they amount to “segregate-and-suppress” legislation that undermines privacy, innovation, and free expression. Goldman challenges the fragmented regulatory landscape and the terminology underpinning age assurance technologies, claiming such laws expose users to surveillance and economic harms. However, critics note that his argument downplays the risks of unrestricted access to harmful content and seems aligned with the stance of industry groups like NetChoice. The paper ultimately favors parental oversight and digital literacy over legal mandates, though it has been criticized for overlooking the practical and ethical concerns driving age assurance efforts. (Source)
Healthline Faces Record CCPA Settlement Over Misuse of Sensitive Health Data and Consent Failures
Healthline Media has agreed to a $1.55 million settlement with the California Attorney General for alleged violations of the California Consumer Privacy Act (CCPA) and Unfair Competition Law—the largest CCPA-related settlement to date. The investigation found that Healthline continued to share user data with advertisers for targeted ads even after users opted out, particularly revealing sensitive health-related information based on visited pages. Additional violations included inadequate contract terms with ad partners and non-functional cookie consent tools. As part of the settlement, Healthline must implement corrective measures, including fixing opt-out mechanisms, halting the sharing of health-related article titles, and maintaining a robust CCPA compliance program. The settlement awaits court approval. (Source)
Spain Arrests Five in $542 Million Crypto Fraud Tied to Global Investment Scam
Five individuals have been arrested in Spain for allegedly orchestrating a cryptocurrency investment scam that defrauded over 5,000 victims—100 of them from Switzerland—out of approximately $542 million. Coordinated by the Spanish Guardia Civil with support from Europol and law enforcement in the US, France, and Estonia, the operation involved arrests in the Canary Islands and Madrid. The suspects are believed to have used a global network to collect and move funds through various financial channels, including crypto transfers. Authorities also linked the group to a complex banking and corporate structure based in Hong Kong. The case is one of Spain’s largest crypto fraud investigations and follows recent international crackdowns on similar scams. (Source)
Chile Cracks Down on Tren de Aragua’s $13.5 Million Crypto-Fueled Laundering Network
Chilean authorities have dismantled a major money laundering operation linked to the Venezuelan criminal group Tren de Aragua, which allegedly funneled over $13.5 million through bank accounts and cryptocurrency to multiple countries, including the U.S., Venezuela, Colombia, and Spain. The crackdown, which resulted in 52 arrests, uncovered that the laundered funds stemmed from crimes such as human trafficking, extortion, drug trafficking, and homicides. Experts note that Tren de Aragua has adopted crypto-based laundering tactics from Mexican cartels to obscure financial trails. The organization has previously been designated a Transnational Criminal Organization by the U.S. Treasury’s OFAC for its expansive illicit operations across the Americas. (Source)
Meta Challenges EU Fine Over “Pay or Consent” Model in Ongoing Data Privacy Dispute
Meta plans to appeal a €200 million fine issued by the European Union for allegedly violating the Digital Markets Act through its “pay or consent” model, which offers users a choice between paying for ad-free access or consenting to data tracking. The European Commission found this approach failed to provide an equivalent alternative without personalized data use, deeming it non-compliant with EU rules. Meta contests the ruling, citing prior legal precedent supporting subscription-based models. The case marks another chapter in Meta’s ongoing conflict with European regulators over data privacy, following earlier fines and legal disputes concerning ad targeting and transatlantic data transfers. (Source)
đź”— More from Liminal
Access Our Intelligence Platform
Stay ahead of market shifts, outperform competitors, and drive growth with real-time intelligence.
Market & Buyer’s Guide for Data Security 2025
Security leaders are replacing point solutions with unified platforms that combine access control, AI data governance and ransomware prevention. This guide reveals what buyers prioritize and where innovation is reshaping data protection.
Save your spot: Tackling First-Party Fraud Demo Day
Discover how 9 leading vendors are stopping chargebacks, promo abuse, and refund fraud in real time.
