Civil society groups, including the Center for Democracy and Technology, are urging the EU to take stronger enforcement actions against spyware technology, Infosecurity Magazine reports. The groups urged the EU to ban companies developing spyware "for any purpose other than strengthening systems security and mandate the responsible disclosure of vulnerability research findings."Full story
Companies are noticing an increase in the use of artificial intelligence tools to build résumés, creating challenges for recruiters during the hiring process, The Wall Street Journal reports. The use of AI technology can be difficult for recruiters due to a large number of résumés being submitted for jobs with some candidates allegedly using tools that provide them answers during Zoom interviews. Full story
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, issued a 30.5 million euro fine to Clearview AI for allegedly operating a database containing 30 billion facial images and creating a unique biometric identifier for each individual's photos. The AP claimed Clearview AI was continuing to engage in the illegal biometric data scraping and would issue an additional fine up to 5 million euros for continued violations.
In an article for Lawfare, Stanford Program on Geopolitics, Technology and Governance Senior Policy Advisor Jim Dempsey detailed the impact the 2024 U.S. election could have on cybersecurity initiatives. Dempsey said the collective policy work on data, technology, cybersecurity and national security "add additional fabric to the patchwork quilt of U.S. cybersecurity law." However, he warned, "despite this year's flurry of activity, significant gaps remain in the coverage of U.S.
U.S. companies are struggling with stricter and timely reporting requirements after experiencing cyberattacks, The Wall Street Journal reports. Cybersecurity leaders often point to "overlapping and conflicting mandates," depending on the state and a lack of regulatory harmonization between state and federal cybersecurity regulators.Full story
The U.S. Federal Trade Commission ordered a California-based security camera manufacturer to pay a USD2.95 million fine to resolve claims the company violated the Controlling the Assault of Non-Solicited Pornography and Marketing Act. The FTC alleged Verkada did not offer the ability to opt out of marketing emails, nor did it honor consumer opt-out requests.
The Saudi Data and Artificial Intelligence Authority published guidance for data minimization standards and best practices for organizations subject to the Personal Data Protection Law. The guidance includes practical examples for data controllers to follow to assist with their compliance efforts.Full story
The U.S. Department of Health and Human Services' Office for Civil Rights withdrew an appeal of a court decision overturning its ability to ban health care providers from using tracking pixels, Healthcare IT News reports. The American Hospital Association and other affiliates sued the office in a Texas court, with the AHA arguing user tracking is essential and the 2022 proposed ban was "unlawful and unwise."Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, wrote about the rise of probabilistic methods used in some artificial intelligence models and how those operations interact with EU General Data Protection Regulation requirements. The AEPD noted, since the systems can sometimes create false answers, their accuracy can be a problem when processing personal data.
The Office of the Privacy Commissioner of Canada announced the funded research projects that comprise its 2024-2025 Contributions Program. The OPC grants will go toward projects exploring deceptive designs and what privacy concerns young people have when it comes to artificial intelligence. The agency increased its maximum funding and also took applications from the U.K. and the U.S. Full story