The Interactive Advertising Bureau Tech Lab is revising its Multi-State Privacy Agreement to account for 19 U.S. states with comprehensive privacy laws, MediaPost reports. The agreement represents "a set of privacy-protective terms that spring into place among a network of signatories and that follow the data as it flows through the digital ad supply chain," according to the IAB Tech Lab.Full story
New Hampshire Attorney General John Formella announced the creation of the Data Privacy Unit within his agency's Consumer Protection and Antitrust Bureau. The new unit will be responsible for ensuring compliance with the state's Data Privacy Act, which enters into force 1 Jan. 2025.
Finland's Office of the Data Protection Ombudsman published its activity report for 2023, detailing its enforcement actions. The regulator resolved 13,060 data protection cases and issued fines between 1,600 and 440,000 euros against companies that allegedly violated privacy protections.Full story
Brazil's consumer protection authority, the Instituto de Defesa de Consumidores, was granted a preliminary injunction against WhatsApp by a federal court judge to halt its personal data sharing practices and require the platform to offer a consent option. The injunction stems from allegations brought in a BRL1.733 billion civil action filed in July. WhatsApp has 90 days to comply.Full story
On a recent episode of NPR's "On Point," U.S. Federal Trade Commission Bureau of Consumer Protection Director Samuel Levine said the agency's probe into "surveillance pricing" practices will look to understand what data companies are using to learn about their customers and how it will impact prices.
France and the U.K. began a joint consultation to discuss cyber threats under the Pall Mall Process. The consultation will analyze commercial cyber intrusion capabilities and its affects on civil society, government agencies and industry groups.Full story
Norway's data protection authority, Datatilsynet, plans to inspect the data practices of public and private institutions as part of its supervisory activities for the rest of 2024. The regulator also plans to look at how artificial intelligence is being used in their compliance activities.Full story
The Committee on Foreign Investment in the U.S. announced a USD60 million settlement with wireless provider T-Mobile to resolve allegations it did not "promptly" report unauthorized access to sensitive data, as mandated in its commitments to the U.S. government when it merged with rival carrier Sprint in 2018, The Wall Street Journal report. The CIFUS is a regulatory panel that reviews commercial agreements that could pose U.S.
The EU Artificial Intelligence Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
Sweden's data protection authority, Integritetsskyddsmyndigheten, established an accreditation process and rules for certifying bodies under the Board for Accreditation and Technical Control. The new system licenses certifications around data processing compliance in Sweden and the European Economic Area.Full story