IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and AI governance developments in the nation's capital and around the U.S. This week, he checks in on various developments and impacts around pervasive geolocation tracking allegations cropping up around the U.S.Full story
The Council of Europe's Framework Convention on AI represents the "first legally binding international treaty" on AI, IAPP AI Governance Research Fellow Richard Sentinella writes. He explored the framework, signed by 46 members, including the EU, U.K., U.S., and how it "holds many clues for what a private enterprise's future regulatory burden might be," regardless of their jurisdiction.Full story
The U.K. Information Commissioner's Office released a response supporting the Data Use and Access Bill, which aims to broaden data protection regulations while bolstering innovation.
Join the IAPP for a web conference 5 Nov. focusing on the latest developments involving India's Digital Personal Data Protection Act. Panelists will focus their discussion on the potential substance included in soon-to-be-released draft DPDPA implementing rules and the wide impact the law will have on organizations around the world.Full story
The U.S. Department of Health and Human Services' Office for Civil Rights settled two cybersecurity cases related to ransomware attacks. The Plastic Surgery Associates of South Dakota agreed to pay USD500,000 for allegedly failing to adequately secure patient information under the Health Insurance Portability and Accountability Act Security Rule.
The European Commission announced the launch of a formal investigation into Chinese online retailer Temu under the Digital Services Act related to the alleged addictive display features and insufficient personalized advertising transparency. The investigation comes after the Commission conducted preliminary analyses on Temu's risk assessment report filed in late September and two requests for information issued to the company this year.Full story
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, opened calls for input on the the EU AI Act's prohibitions on the use of emotion-recognition technology in both workplace and educational settings. The public is invited to send comments to the AP until 17 Dec.Full story
Brazil's Superior Court of Justice reflected on relevant litigation and case law related to the General Data Protection Law over the last four years.
Companies are pushing a task force dedicated to implementing Colorado's AI Act to change definitions and the appeal process associated with the law, The Sum & Substance reports.
The Washington Post reports social media company Meta disclosed in a security filing the U.S. Consumer Financial Protection Bureau is probing whether it improperly used financial information from third parties in its advertising business. The company said it disagrees with the investigation, one of several launched by regulators in recent years into Meta's data processing practices.Full story