In an op-ed for Lawfare, Global Cyber Strategies founder and CEO Justin Sherman discussed key takeaways from a recent National Public Data breach involving 2.9 billion personal records. Sherman wrote "the aggregation of data at scale adds new dimensions to privacy risks," while the data brokerage that led to the NPD breach "remains a highly unregulated industry."Full story
Moldova's National Center for the Protection of Personal Data announced its new data protection law was published in the Official Gazette. Law No. 195/2024 on the protection of personal data aims to transpose the provisions of the EU General Data Protection Regulation and ensure "an adequate level of protection of personal data, in accordance with the rules of the European Union and the Council of Europe." The law will take effect 23 Aug.
Brookings Institution Distinguished Visiting Fellow in Governance Studies Cameron Kerry discusses the implications of the United Nations' artificial intelligence goals, which were revealed in a leaked final draft report from its High-Level Advisory Body on AI. Kerry argued the report's aim to position the U.N.
France's data protection authority, the Commission nationale de l'informatique et des libertés, published a primer for students taking digital exams, explaining their rights when those tests collect information. The CNIL explained students have rights when their personal data is collected and recommended institutions offer exams in person to mitigate data collection.Full story
Sweden's data protection authority, the Integritetsskyddsmyndigheten, fined Apoteket and Apohem a combined SEK45 million for allegedly using tracking pixels on their websites and transferring the data to Meta. The two companies activated a subfunction in the pixel that triggered the unlawful data collection, according to the IMY.Full story
In an op-ed for Verfassungsblog, Wilson Sonsini Goodrich & Rosati Senior Privacy Counsel Christopher Kuner outlines the current expectations and legal standards for international data transfers from EU countries. Kuner claimed raising "the level of EU public discourse on data transfers" could "lead to a greater realisation of the importance of data transfers for the EU in legal, social, and economic terms."Full story
The U.S. Artificial Intelligence Safety Institute at the National Institute of Standards and Technology has agreed to collaborate on "AI safety research, testing and evaluation" with Anthropic and OpenAI. The partnership allows the institute to review major new models both before and after they are publicly released.
Yelp filed a lawsuit against Google for allegedly monopolizing local search advertising markets, The Wall Street Journal reports. The lawsuit claimed "Google took Yelp's data, used it for its own competing property to siphon users away from Yelp, and profited."Full story
The U.K. government is seeking feedback from organizations and data controllers on proposed changes to required data protection fees. The potential updates "aim to secure the financial resources required to support the (U.K. Information Commissioner's Office) in fulfilling its functions under data protection legislation." The consultation period ends 26 Sept.Full story
The EU Artificial Intelligence Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.