Privacy news: rules, warrants and tool changes, newest first

Privacy news for October 2026 is two proposals taken back, and a holder learns no new permission from that. On 5 October FinCEN withdrew a proposed rule on recordkeeping for convertible virtual currency and unhosted wallets, and a proposed special measure on convertible virtual currency mixing. The proposals are not in force. Someone who wanted the release to announce that holding a privacy coin had been a crime, or that mixing had become lawful, will not find either sentence. What the withdrawal changes, next to the EU and UK rules it does not touch, is the legal map on the crypto privacy page.

This month's document

The proposals would have bound banks and money services businesses. A person holding coins in a wallet they control was outside both drafts.

5 October 2026 Two FinCEN proposals, withdrawn
FinCEN says it withdrew them after reading the comments, as part of a deregulatory agenda, so digital-asset rules would be "fit-for-purpose". The agenda does not decide that a holder may mix coins. A court sentence and a police seizure are darknet news.
15 October 2026 Ledger says tampered devices sent seed phrases over LTE
A supply-chain attack through resellers, not a rule or a warrant. Ledger says its own chip and software were not flawed. Where to buy a wallet is on the wallets page.

Dated records that did not change a rule

A real document with a date can still be the reason for a tool pick, rather than a new rule. These three were not issued on 5 October, and none of them is the FinCEN withdrawal.

The warrant, the subpoena and the protocol post, and the page that weighs each one
Document	Date	What it settles
Mullvad's office search	18 April 2023	Swedish police came to the Gothenburg office with a warrant for computers holding customer data and, on Mullvad's account, left without seizing anything and without customer information. Mullvad calls it the first warrant there in over 14 years. The VPN page weighs that visit. The 9 October Tor post does not mention the VPN, and it does not rewrite the visit.
Signal and a grand jury	6 March 2026	A District of Columbia grand jury asked for account-creation time and last connection time on 37 phone numbers. Seven were not accounts. Twenty-four had nothing in the period covered. Six produced those two dates. The letter says Signal does not have the messages. The messengers page is where that answer is set next to the other apps.
Session's protocol post	13 October 2026	Session's 13 October post says the apps in circulation still do not encrypt one-to-one chats with forward secrecy. What those apps can do is recognise a newer message and ask for an update. The messengers page treats that as the status of the software, not as a statute.

The news page lines the FinCEN release up with Empire's sentence and the Tor post, and says what each organisation's own page confirms. A pick among VPNs, messengers or phones stays on the privacy tools page.