The Netherlands' data protection authority, Autoriteit Persoonsgegevens, investigated the Education Executive Agency's use of algorithms and found the system could be discriminatory toward certain students. The agency allegedly used students' personal information to determine which students were more likely to abuse its nonresident student grant.
While there is no shortage of multilateral platforms dedicated to comprehending cross-border digital regulation, the U.N.'s Global Digital Compact may provide the most comprehensive initiative yet. IAPP Research and Insights Director Joe Jones and Analyst Cheryl Saniuk-Heinig, CIPP/E, CIPP/US, outline the GDC's origins and perceived goals aimed at "establishing a collective governance framework spanning the different digital law and policy domains."Full story
The California Privacy Protection Agency's 8 Nov. board meeting brought several crucial developments for the future of the agency's enforcement strategy. The board approved a formal rulemaking on a package of draft regulations, including those on automated decision-making technology, and adopted data broker regulations to help clarify Delete Act requirements. Meanwhile, CPPA Executive Director Ashkan Soltani announced his resignation, effective January 2025.
The U.K. Competition and Markets Authority issued its Q2/Q3 report on implementation of commitments made by Google related to its Privacy Sandbox initiative. The latest report indicated Google has complied with prior commitments made to avoid designing and applying sandbox tools "which discriminates in favour of its advertising businesses," and the U.K.
Corporate law firm Gunster agreed to pay USD8.5 million to settle a class-action lawsuit over a data breach that impacted approximately 10,000 clients and employees, Reuters reports. The cyberattack on the law firm allegedly exposed sensitive personally identifiable information after a malicious actor obtained access to the firm's file management system.Full story
BBC News reports on growing privacy issues around genetic testing companies' data handling. DNA testing company Atlas Biomed allegedly closed, leaving consumers to question what happened to their sensitive genetic data. The U.K. Information Commissioner's Office said it received complaints that the company did not inform users of its data deletion process or provide information about how consumer information was handled after the company ceased trading.Full story
Netherlands' data protection authority, the Autoriteit Persoonsgegevens, released its final recommendations on how companies, governments and other entities should govern AI. The agency and the National Inspectorate for Digital Infrastructure plan to meet 18 Nov. to discuss the final rules and take questions from stakeholders.Full story
The International Network for Digital Regulation Cooperation and the Organisation for Economic Co-operation and Development discussed how their domains interact and how to work more closely together on regulatory issues around technologies and digital innovation. The INDRC network is comprised of regulators from Australia, Canada, Ireland, the Netherlands and the U.K.Full story
Period tracking app Clue said it will not share health data with the U.S. government after consumers raised concerns about potential government monitoring of women's health information, Newsweek reports. Clue said in a social media statement it has "never and will never disclose any member's private health data to any authority. If we are ever subpoenaed, we will not comply."Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, held a four-year anniversary celebration 6 Nov.