Organizations should begin to prepare for Australia's Privacy Act reform to ensure they will be able to meet the bills' children's privacy and cybersecurity obligations.
Data broker Kochava reached settlement agreement covering three class-action complaints over its use of consumers' location data, MediaPost reports. Consumers in California, Idaho and Massachusetts filed the lawsuit after the U.S. Federal Trade Commission claimed Kochava sold consumers' sensitive geolocation data without consent.Full story
The recent decision from the European Data Protection Board clarifying obligations of data processors under the EU General Data Protection Regulation "works through a number of tricky areas affecting controller-processor-subprocessor relationships," Bird & Bird Partner Ruth Boardman writes.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and AI governance developments in the nation's capital and around the U.S. This week, he dissects the impactful aspects and nuances contained in the U.S. Federal Trade Commission's recent privacy settlement with Marriott.Full story
EU institutions are being overhauled following the June elections, but legacy files from the previous term continue to land. NIS2, the CRA and PLD2 are the latest legislative acronyms to take note of for cybersecurity and AI liability, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes, outlining the details and changes within the NIS2 Directive, Cyber Resilience Act and Product Liability Directive.Full story
Prominent AI models have fallen short of EU regulations governing cyber resiliency and preventing discriminatory output, according to data reviewed by Reuters. The publication obtained the results of a tool developed by Swiss startup LatticeFlow AI, and research partners ETH Zurich and Bulgaria's INSAIT that scored AI models on a rubric between 0 and 1 across multiple categories, such as technical capabilities and safety.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, called for stakeholder comments regarding agency priority items and initiatives for its 2025-2026 regulatory agenda. Interested parties have until 31 Oct. to submit comments.Full story
Former Google Chief Privacy Officer Keith Enright, AIGP, CIPP/G, CIPP/US, reflected on his career and how digital regulatory compliance is a constantly adapting process during this recorded keynote speech at the IAPP Privacy. Security. Risk 2024.Full story
New Zealand Privacy Commissioner Michael Webster said, while law enforcement agencies have worked to comply with several privacy obligations laid out in a 2021 privacy notice on biometric data, police still need to ensure unlawfully collected data is deleted from its systems.
European Data Protection Supervisor Wojciech Wiewiórowski told Key4biz he is feeling more supportive of the EU AI Act as a way to deal with AI in the EU, saying its approach to product and service safety strikes the right regulatory balance.