Breaking news

Strava Upload Exposes Location Of French Nuclear Aircraft Carrier

Incident At a Glance

A routine run on the deck of the Charles de Gaulle aircraft carrier became an international security concern after a French Navy officer uploaded his workout to Strava. The popular fitness tracking app inadvertently broadcast the precise location of the nuclear-powered warship as it made its way toward the Middle East. Details from naval-technology underscore the gravity of the situation and the potential risks to military operations.

Privacy And Operational Security Under Scrutiny

The case is not isolated. French newspaper Le Monde reported similar incidents linked to publicly shared fitness data. Previous reporting by The New York Times showed that Strava activity could be used to identify military bases worldwide. Public workout data has repeatedly exposed sensitive locations.

The Broader Implications For Defense And Technology

The incident follows a 2024 case in which the movements of French President Emmanuel Macron were tracked through publicly shared workout data from his security detail. Although the deployment of the Charles de Gaulle had already been publicly announced, the level of location precision provided by the Strava upload increased the risk.

A Critical Reminder For The Digital Age

A representative for the French Armed Forces emphasised that this breach of protocol “does not comply with current guidelines,” which are routinely communicated to servicemen and women. The incident serves as a stark reminder not only for military personnel but also for all users of location-based services: reassessing privacy settings on platforms like Strava is essential in a world where digital footprints can compromise both personal and national security.

Meta’s $18 Billion Settlement Limits State Claims Over Children’s Data

Meta’s $18 billion settlement with attorneys general from 29 U.S. states includes a provision limiting future state claims over the company’s use of children’s data for age-assurance systems.

Under the agreement, Meta must develop, train and begin testing a system to identify users under 13 within a year of the settlement taking effect. The company already uses AI-based age-detection tools, although the agreement does not require the new system to use AI.

States Agree To Limits On Future Claims

The Children’s Online Privacy Protection Act (COPPA) generally restricts the collection and retention of personal data from children under 13. Under the settlement, the 29 state attorneys general agreed not to bring past, present or future claims under COPPA or similar state laws over the specified use of children’s data.

Meta will not be permitted to use information from users under 13 for advertising, marketing or algorithmic optimisation.

Federal Enforcement Remains Unclear

COPPA is primarily enforced by the Federal Trade Commission, which is not a party to the agreement. That leaves open the possibility of separate federal action over how Meta collects or uses children’s data.

Another issue is whether Meta can keep age-assurance data isolated from its other systems. An independent auditor will monitor compliance, but the settlement does not fully specify what data Meta can retain for training, how long it can be stored or whether derived insights can be used elsewhere.

Legal Risks Remain

Joshua Wurtzel, a partner at Schlam Stone & Dolan, said states could still pursue claims if Meta uses the data outside the settlement’s limits. Such cases could depend on how those limits are interpreted.

Peter Jackson, a data and intellectual property attorney at Greenberg Glusker, said the provision could “disincentivize future enforcement actions.”

The agreement gives Meta greater legal certainty around using children’s data for age assurance, but questions remain over federal enforcement, data retention and secondary use.

Uol
Aretilaw firm
The Future Forbes Realty Global Properties
eCredo

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter