CFPB finalizes rule to supervise digital payment app privacy
The U.S. Consumer Financial Protection Bureau finalized a rule to allow supervision over nonbank companies' payment apps and digital wallets, including their privacy practices.
The U.S. Consumer Financial Protection Bureau finalized a rule to allow supervision over nonbank companies' payment apps and digital wallets, including their privacy practices.
Despite uncertainty around U.S. Congress' next moves on AI policy, lawmakers appear keen to find a way to address AI-enabled fraud and scams. Senate Committee on Commerce, Science and Transportation subcommittee members recently wrestled with how to address liability associated with growing AI trends in fraud, IAPP Staff Writer Caitlin Andrews reports.Full story
The U.S. Federal Communications Commission proposed a USD734,872 fine to Chinese doorbell manufacturer Eken for alleged privacy issues and violations of FCC regulations. Eken's smart home products allegedly exposed user information, including IP addresses, and access to users' household cameras to third parties. Full story
The U.K. Information Commissioner's Office published advice on how to share personal data responsibly when addressing scams and fraud.
U.S. Senate Select Committee on Intelligence Chair Sen. Mark Warner, D-Va., claimed hackers in China allegedly gained access to politicians’ communications, including text messages and phone calls, The New York Times reports. Warner said the hackers obtained politicians' sensitive personal and geolocation data, and "this is far and away the most serious telecom hack in our history."Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, approved a code of conduct that aims to mediate data protection complaints within digital communications.
Information and Privacy Commissioner of Alberta Diane McLeod offered comments and proposed changes to bills aiming to reform public-sector privacy requirements under the Freedom of Information and Protection of Privacy Act.
Among the many discussions at the IAPP Europe Data Protection Congress 2024 was how legitimate interests can be applied as a legal basis for data processing under the EU General Data Protection Regulation. In a breakout session, Ireland's Data Protection Commission shared its recent experience assessing applicability of legitimate interests through an inquiry that resulted in a 310 million euro fine to LinkedIn last month.
IAPP AI Governance Research Fellow Richard Sentinella looks at the state of play around global AI law and policy as 2024 comes to a close, while offering a glimpse of what might be on the horizon in 2025.
The U.S. Department of Commerce and the Department of State announced the launch of an international network of AI safety-focused groups. The U.S. will chair the group looking to prevent risks posed by AI and fostering a more uniform global regulatory landscape.