Craigslist founder Craig Newmark said he will donate USD100 million to protect U.S. cybersecurity infrastructure and develop programs to educate individuals on the importance of security, The Wall Street Journal reports.
The U.S. District Court for the Northern District of California ruled a class-action lawsuit can proceed against online therapy provider Headway over alleged personal data sharing, Courthouse News Service reports.
The FBI published a request for information on facial recognition providers to potentially source the technology for investigations, Biometric Update reports. The FBI said it is looking into the technology's data security practices and its ability to turn "face images into biometric templates before submitting them to search for potential matches."Full story
Gov. Gavin Newsom, D-Calif., enacted bills to limit the use and subsequent harms of AI-generated deepfakes and likeness replication. Three bills signed by Newsom require social media companies to moderate the circulation of election-related deepfake content. Separately, Newsom approved two bills protecting actors' and performers' digital likenesses against AI replication before and after their deaths.
The U.S. Federal Communications Commission announced a USD13 million settlement with AT&T to resolve a data breach investigation involving customer data exposed in a contracted vendor's cloud environment. As part of the settlement, AT&T entered into a consent decree committing to enhance its data security practices and supply chain integrity. Full story
India's draft Digital Personal Data Protection Act regulations will be subject to a month-long stakeholder consultation upon their release, Moneycontrol reports.
Spain's data protection authority, the Agencia Española de Protección de Datos, issued guidance around mobile device use in an educational setting.
South Korea's Personal Information Protection Commission published guidance detailing when consent is needed for personal information processing.
The U.S. Department of Commerce announced the Swiss-U.S. Data Privacy Framework took force 15 Sept. for certified companies.
With the rise in direct-to-consumer genetic testing comes a range of fresh privacy risks for individuals. Those potential issues are being addressed through state-level privacy legislation — both targeted and comprehensive — as well as federal enforcement actions. IAPP Principal Researcher, Privacy Law and Policy, Müge Fazlioglu, CIPP/E, CIPP/US, analyzes the U.S. guardrails around genetic privacy and how recent enforcement work could shape future compliance.Full story