Despite three out of five small- and medium-sized businesses already using or planning to use AI within the next two years, "few SMBs are prepared for the accompanying risks," voyAlge Strategy co-founder, Vice President, Chief Privacy Officer, Chief AI Officer, Managing Editor and Chief Operating Officer Christina Catenacci, and co-founder, President and CEO Tommy Cooke, Ph.D., write.
Australian Privacy Commissioner Carly Kind warned companies against relying on third-party service providers for Consumer Data Right compliance as the OAIC issued its first CDR decision against Regional Australia Bank. The OAIC found third-party provider Biza "co-mingled" RAB customer data with the personal data of other Biza clients.
To better protect data subjects' biometric data, systems must be "designed in ways that actually honor revocability, not just legally, but technically and operationally," software engineer Naveen Kumar Reddy Pajjuri writes in an op-ed.
The Global Cross-Border Privacy Rules Forum is launching Global CBPR and Privacy Recognition for Processors certification programs for organizations to ensure the protection of personal data transferred across jurisdictions. Both certification programs will launch 2 June and feature approximately 100 certified companies.
The Oregon Legislature voted for final passage of House Bill 2008, which enhances requirements around geolocation and children's data in the state's comprehensive privacy law. The bill bans the sale of precise geolocation and personal information of minors under age 16. HB 2008 advances to the desk of Gov. Tina Kotek, D-Ore., for enactment or veto.Full story
Denmark's data protection authority, Datatilsynet, added two additional cybersecurity measures to its existing catalog under its "malicious activity" tab. The new measures were developed in response to an increased number of data breaches due to hacking activities.Full story
Gov. Greg Abbott, R-Texas, signed a bill that would require app store providers to verify users' ages, Reuters reports. The law, entering into force 1 Jan. 2026, will require parental consent to download apps or make in-app purchases for minor users, which is similar to a bill passed in Utah.
The Center for Democracy and Technology and 88 stakeholders signed a joint letter raising concerns about the possible negative impacts of the European Internal Security Strategy on end-to-end encryption in Europe.
Spain's data protection authority, the Agencia Española de Protección de Datos, said AI, video surveillance, internet services, commerce, transportation and hospitality were the most common issues of the 18,855 complaints received in 2024.
IBM published a video explaining how agentic AI can pose a cybersecurity risk, both by introducing new vulnerabilities and making it easier to conduct attacks. But the technology can also help counteract these challenges by aiding in detection and scaling responses.Full story