The U.S. Department of Justice charged two men with allegedly breaking into AT&T's systems and stealing around 50 billion customer calls and text records, TechCrunch reports. The DOJ's indictment alleges hackers also made ransom attempts against individuals impacted by the breach, threatening to leak the stolen information.Full story
Reuters reports the European Commission called on Apple to stop allegedly using geo-blocking on some of its app services and threatened enforcement measures if it did not comply. Geo-blocking refers to restricting content based on a user's location, which requires geolocation tracking.Full story
The Hamburg Commissioner for Data Protection and Freedom of Information wrote about two data deletion cases handled by the Federal Court of Justice and the European Court of Justice. The agency reiterated how to go about requesting data deletion and noted the right to privacy does not always apply if the information in question relates to the public interest.Full story
Meta plans to roll out an alternative targeted advertising model for EU Facebook and Instagram users that does not require payment for fewer personalized ads. The original pay-or-consent proposal remains intact at a lower cost, but Meta is adding a free opt-in model characterized as serving "less personalized ads." IAPP News Editor Joe Duball reports on Meta's new direction and its broader data protection impacts.Full story
The IAPP released its IAPP Privacy Governance Report 2024, building on previous comprehensive efforts to shine a light on the location, performance and significance of privacy governance within organizations. Research focused on governance and organizational structures, privacy strategy and planning, compensation and budget management, and performance metrics and monitoring.
IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes for Euractiv about the challenges of weaving in all of the EU's various digital policy rules and how streamlining governance could help groups navigate them. "An unintended effect of the EU approach is feeding an overwhelming sense of disorientation as organisations face exponential regulatory complexity when operating in the digital world," she wrote.
The Hamburg Commissioner for Data Protection and Freedom of Information fined a debt collection service provider 900,000 euros for retaining personal data for up to five years without a legal basis. The problem was discovered as part of an audit from the Hamburg Federal Debt Collection Agency. The company admitted to the violation and cooperated with the authority, according to the agency. Full story
Canada Minister of Innovation, Science and Industry François-Philippe Champagne announced the launch of the country's Artificial Intelligence Safety Institute 12 Nov.
Germany's Federal Office for Information Security published an AI survey that allows organizations to submit information and concerns related to AI security. The survey aims to understand how companies are interacting with AI technology and ensure organizations are enlisting the proper tools to navigate potential risks associated with AI. Companies have until 15 Nov. to submit the survey.Full story
Denmark's data protection authority, Datatilsynet, said the National Police responded to its inquiry about the agency's use of facial recognition technology.