The EU AI Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
The Court of Justice of the European Union issued a ruling stating data protection authorities are not obligated to render a fine or order corrective action following a data breach if the controller has taken remedial actions.
The European Commission announced that more than 100 companies signed a voluntary pledge to begin applying principles of the EU AI Act prior to its entry into application. Signatories range across size and industry.
The U.S. Federal Trade Commission announced its Operation AI Comply initiative will bring enforcement actions against five companies for alleged deceptive and harmful AI use.
South Korea's Personal Information Protection Commission issued a KRW1.14 billion fine to Worldcoin and its affiliates for alleged violations of the Personal Information Protection Act. The PIPC claimed Worldcoin collected biometric data from users in exchange for digital assets without a legal basis, and transferred the data to third countries in violation of the PIPA.
The Office of the Privacy Commissioner of New Zealand urged businesses to consider swift data breach notification practices. Commissioner Michael Webster addressed the need after a health care group allegedly ignored its reporting requirements for privacy breaches several times. He said talking to the office even if all the details of a possible breach are not known helps solve the problem quicker.Full story
Norway's data protection authority, Datatilsynet, discussed its part in the country's newly released digital strategy. The plan, which runs through 2030, emphasizes building privacy into the public sector's information technology framework and continuing to protect citizens' data from Big Tech companies.Full story
Reuters reports the U.S. District Court for the Southern District of New York struck down a law requiring food delivery services to provide customer data to the restaurants they order from. A group of delivery companies argued the law intruded on customers' privacy rights and threatened their business prospects.Full story
Sweden's data protection authority, the Integritetsskyddsmyndigheten, said it supports police use of surveillance tools, however, safeguards to protect individuals' privacy must remain a top priority.
Security researchers found a flaw with an automaker's website that allows hackers to access vehicle locations and gain control of certain features, Wired reports. Researcher Neiko Rivera said automotive companies typically focus on "'embedded' devices — digital components in non-traditional computing environments like cars — rather than web security," leading to security issues for the company and consumers.Full story