The U.S. Cybersecurity and Infrastructure Security Agency published a draft of its National Cyber Incident Response Plan Update on the federal register. The plan is open for public comment until 15 Jan. 2025.Full story
Reuters reports both TikTok and ByteDance filed an emergency request to the U.S. Supreme Court to halt the federal law banning the social media platform if it does not divest from Chinese parent company TikTok. The company, along with a group of app users, argued the law should be paused while an appeal of a lower-court decision upholding the law is heard.Full story
With enforcement of India's Digital Personal Data Protection Act on the horizon, policymakers will be confronted with the fact that the law's supplementary rules contradict existing law. GE HealthCare Data Privacy Analyst Ankita Kaw, CIPP/US, outlines how the DPDPA sits at odds with the Right to Information Act, Reserve Bank of India Regulations, Telecom Regulatory Authority of India Act and the Information Technology Act.Full story
The Security Incident Communication Regulation under Brazil's General Data Protection Law clarifies what constitutes a cybersecurity incident under the law.
Spain's data protection authority, the Agencia Española de Protección de Datos, highlighted its work on protecting minors from digital harms. Those efforts have included priority action on removing sexual or violent content posted without consent and a working group which resulted in legislation raising limitations around data processing of minors up from age 14 to 16.Full story
The U.S. Court of Appeals for the District of Columbia Circuit denied ByteDance's request to stop the potential U.S. ban of its social platform TikTok, MediaPost reports. Meanwhile, members of the U.S. House Select Committee on the Chinese Communist Party sent a letter to Google and Apple urging the companies to prepare to remove TikTok from its app stores if the platform is banned 19 Jan.
A cyberattack on Rhode Island's social services platform, RIBridges, breached the personal data of residents that applied for government assistance, The New York Times reports. Gov. Dan McKee, D-R.I., said the state is investigating the incident to determine how many residents were affected and the information potentially breached.Full story
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, launched a two-week campaign to educate citizens on the potential risks cookies pose to their personal information.
The U.S. Federal Trade Commission's Office of Technology and Division of Privacy and Identity Protection discussed how companies training AI, or engaging in targeted advertising and commercial surveillance, can create pools of personal information that bad actors can target.
Thailand's Personal Data Protection Commission extended the registration period for its Personal Data Protection Assessment System to 18 Dec. The program aims to help organizations ensure compliance with the Personal Data Protection Act while offering suggestions on how to bolster data security.Full story