AI machine learning tools that have access to the internet could expose sensitive training data, 404 Media reports. Tools that are misconfigured or have vulnerabilities may allow "unauthorized individuals to access, download, or even run sensitive ML models and datasets," Reddit Senior Security Engineer Charan Akiri said.Full story
The European Commission issued its one-year report reviewing the progress U.S. authorities have made in implementing the requirements of the EU-U.S. Data Privacy Framework. The report addresses the operational steps undertaken by U.S. regulatory agencies, such as the Department of Commerce and the Federal Trade Commission to meet DPF requirements, as well as measures adopted by the U.S. intelligence and national security community to build out the redress mechanisms for EU citizens.
The European Data Protection Board adopted several significant documents Wednesday, including highly anticipated draft guidelines on the processing of personal data based on legitimate interest and an opinion on obligations following from the reliance on processors and sub-processors.
The Cyber Security Bill 2024 was introduced to the Parliament of Australia by Cybersecurity Minister Tony Burke. The bill aims to strengthen ransomware attack reporting obligations and establish privacy standards for smart devices to ensure consumer data is safeguarded.
Politico reports on the tension between EU data protection authorities and Big Tech companies looking to advance their AI products. Recent enforcement actions have caused companies to slow down introducing AI on their platforms and in their products, citing regulatory uncertainty and overregulation. Privacy advocates argue safety must be considered to innovate correctly.Full story
The U.K. Information Commissioner's Office said institutions need to prepare for quantum computing to become more widespread and the challenges to data protection that expansion will impose. A report on the technology from the office endorses post-quantum cryptography to protect algorithms used to conceal personal information and national security information.Full story
The U.S. National Institute of Standards and Technology and the U.K. Responsible Technology Adoption Unit wrote about the difficulties of scaling up privacy-preserving technologies such as federated learning. The two entities have been writing about federated learning as a solution to privacy challenges associated with large datasets.Full story
The U.S. Department of Justice filed paperwork with the U.S. District Court for the District of Columbia that could enforce "structural remedies" against Google over the company's alleged antitrust practices, including those related to the internet search market, the Guardian reports.
The European Commission proposed a framework to standardize digital passports and identity cards for those entering and leaving the Schengen Area. The proposal includes a EU Digital Travel app, which would store the credentials and use a biometric system to access the information.Full story
The Center for Digital Democracy's How TV Watches Us: Commercial Surveillance in the Streaming Era report claimed targeted advertising practices for connected TVs have created a "massive data-driven surveillance apparatus" that harms consumers.