The 2025 IAPP Salary Survey aims to capture how compensation matches professionals' additional responsibilities in an evolving digital landscape. IAPP Principal Researcher Saz Kanthasamy, CIPP/E, CIPM, FIP, reviews the 2023 IAPP Salary Survey results while outlining notable salary impacts, including the AI boom and added regulatory obligations, since the last survey. The deadline to participate in the 2025 survey is 11 April.Full story
Euractiv reports a European General Court hearing on Member of French Parliament Philippe Latombe's challenge of the EU-U.S. Data Privacy Framework may boil down to whether he has standing to bring such a complaint.
With the U.S. Securities and Exchange Commission's recently enacted cybersecurity disclosure obligations, organizations are examining their current disclosure standards and monitor filings to ensure requirements are met.
Norway's data protection authority, Datatilsynet, detailed frequently asked questions on data protection and navigating potential harms while implementing AI technology. Through the lens of its AI sandbox, the Datatilsynet discussed the use of personal data toward AI development, AI as means to boost data minimization and how anonymization can be applied to training data.Full story
The European Commission published the implementing decision for the Digital Europe Work Programme 2025-2027. The Work Programme contains the Commission's new digital policy priorities around tech sovereignty, democracy and security in the context of implementing the EU Chips Act and AI Act.Full story
The U.K. Information Commissioner's Office reviewed how the financial services sector handles children's data collection and details what improvements could be made. The findings included a need to revisit privacy information as children age and more of a distinction between marketing toward children and adults.
U.S. Federal Trade Commission Chair Andrew Ferguson sent a letter to the U.S. Trustee regarding the bankruptcy of genetic data testing company 23andMe expressing his concern over the potential sale of customers' sensitive personal data as part of the bankruptcy proceedings.
The U.K. Department for Science, Innovation and Technology and the National Cyber Security Centre outlined the potential application of the Cyber Security and Resilience Bill. The proposal would require hospitals and energy suppliers to have stronger cybersecurity protections in place and potentially give the government more leeway to require stronger defenses.Full story
A group of U.S. Senate Democrats introduced a bill to update the Privacy Act in response to the Department of Government Efficiency's collection of vast amounts of government data, Wired reports.
Axios reports on potential measures to safeguard personal information on mobile devices while traveling. Center for Internet Security Vice President of Security Operations and Intelligence Randy Rose suggested individuals use virtual private networks to encrypt personal data, avoid public Wi-Fi networks, and delete credit card information and images of important documents to protect personal information.Full story