Poland's data protection authority, Urząd Ochrony Danych Osobowych, issued a PLN4 million fine to banking company mBank for alleged EU General Data Protection Regulation violations. The DPA claimed mBank did not notify consumers after a data breach impacted their sensitive personal information.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he digs into the California Privacy Protection Agency's latest enforcement advisory covering dark patterns and user choice.Full story
The California State Legislature passed a host of artificial intelligence-focused bills before the end of its 2024 legislative session. Chief among the approved bills is Senate Bill 1047, an AI safety proposal that would require companies to conduct risk assessments before launching AI technology. IAPP Staff Writer Caitlin Andrews reports on the debate around the bill and its possible impacts as it awaits potential enactment by the governor.Full story
The EU digital policy agenda over the last five years has focused on several big areas, from artificial intelligence to data sharing. IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes how the European Health Data Space "will impact how many types of data are collected, used, shared and re-used" as it takes force this fall.
Belgium's Data Protection Authority issued a preliminary sanction against Dutch media company 4 Mediahuis for alleged unlawful cookie banners and deceptive design patterns. The ADP originally launched an investigation into the company on behalf of a Dutch citizen after the complainant alleged 4 Mediahuis websites did not offer a "refuse all" cookies button.
The Netherlands' data protection authority, the Autoriteit Persoonsgegevens, found entities are too slow to notify people if their information was compromised in a data breach, according to a survey of the 50 largest Dutch data breaches in 2023. The AP also found there was insufficient information about which data was affected and warning messages often lacked urgency.Full story
For the first time, the International Olympics Committee had a plan for how it would use artificial intelligence and the future it sees for the technology in sports. IAPP Staff Writer Caitlin Andrews reports on what it took to create the Olympic AI Agenda, where AI in the Olympics may go next and how some principal AI governance ideas still matter in a human-centric field.Full story
The European Commission's Artificial Intelligence Office will launch its drafting process for the General-Purpose AI Code of Practice beginning 30 Sept. The AI Office received interest from nearly 1,000 organizations and individuals to participate in the plenary session. Stakeholders invited to participate will be notified prior to the 30 Sept. event.Full story
The Hill reports Texas is suing the U.S. Department of Health and Human Services over a rule which provides greater protections for reproductive health care information.
The Belgian Data Protection Authority's Hielke Hijmans announced he is a candidate to replace Wojciech Wiewiórowski as the European Data Protection Supervisor, Euronews reports. Hijmans is the chair of the Belgian DPA's litigation chamber and member of its board of directors. Wiewiórowski is reportedly seeking a second term as EDPS with his first five-year term set to end in December.Full story