Your daily source for the most important privacy and data protection news from around the world.
Overview of global AI governance law and policy — Part 3: US
Garante permits reactivation of ChatGPT in Italy
Italy's data protection authority, the Garante, allowed OpenAI to reactivate ChatGPT in the country after meeting several conditions related to personal data processing under the EU General Data Protection Regulation, Reuters reports. OpenAI committed to providing "greater visibility of its privacy ...
BBB National Programs' CARU issues compliance warning for AI advertising
BBB National Programs' Children's Advertising Review Unit issued a compliance warning for applying its Advertising and Privacy Guidelines in the context of artificial intelligence. The guidelines warn companies using AI should be cautious of the technology deceptively advertising to children through...
FTC finalizes InMarket location data settlement
The U.S. Federal Trade Commission finalized its January order against data broker InMarket Media over claims of improper location data collection. Per the order, InMarket is barred from selling, sharing or licensing consumer location data and must delete such existing data if it does not obtain vali...
CISA plans voluntary cybersecurity pledge
The U.S. Cybersecurity and Infrastructure Security Agency plans to roll out a voluntary pledge committing U.S.-based technology companies to strengthening cybersecurity standards under the agency's Secure by Design initiative, Wired reports. The pledge includes goals for tech companies such as "fost...
UnitedHealth Group CEO confirms $22M ransomware payment
Health insurance company UnitedHealth Group confirmed to the U.S. Senate Committee on Finance that it paid hackers USD22 million in ransomware payments, CNBC reports. UnitedHealth Group CEO Andrew Witty said hackers were able to access the system due to a lack of multifactor authentication tools, le...
South Korea's PIPC issues guidelines for drafting data processing policies
South Korea's Personal Information Protection Commission published guidelines for creating a data processing policy. The guidelines seek to assist organizations in developing their own data processing policies to facilitate compliance with the Personal Information Protection Act.Full story...
Denmark's DPA responds to children's data processing concerns
Denmark's data protection authority, Datatilsynet, responded to an inquiry from the Children's Rights National Association, Børns Vilkår, that claimed social media platforms may violate age limit requirements set within the Danish Data Protection Act. The DPA said the "age limit for children's conse...
Israel introduces bill to allow privacy class-action lawsuits
Israel's Ministry of Justice introduced a bill that allows alleged privacy violations to be included in class-action lawsuits. The bill aims to expand the "possibility of filing a class action lawsuit for violation of privacy" under Section 2 of the Protection of Privacy Law while promoting fair and...
The key elements of an effective cookie governance program
While the use of cookie banners for obtaining user consent is becoming a common method to notify users and meet choice obligations, Red Clover Advisors founder and CEO Jodi Daniels, CIPP/US, writes adding a banner to a website "isn't a quick trip to compliance." Daniels said an effective cookie gove...
Recent Comments