Texas Attorney General Ken Paxton filed a lawsuit against General Motors in state court accusing the company of violating the Texas Deceptive Trade Practices Act when it allegedly sold data on 16 million drivers to insurance companies and third parties, The New York Times reports.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, Director President Waldemar Gonçalves attended the Digi Alliance seminar to discuss cybersecurity practices. Gonçalves said the event provided "the chance to learn from experts how organizations here are structured in this area and how they operate.
The U.N. reached an agreement on a draft cybercrime convention aiming to strengthen member states' ability to combat the issue more effectively. The draft would criminalize illegally accessing an information or communication system, intercepting nonpublic data transfers and misusing devices, among other offenses.Full story
The Administrative Court of the Lisbon District agreed with Portugal's National Data Protection Commission's decision to fine the Municipality of Lisbon 1,027,500 euros for alleged EU General Data Protection Regulation violations. The court claimed Lisbon violated GDPR by "disclosing the personal data of demonstration promoters to third parties."Full story
The patchwork of U.S. comprehensive state privacy laws continues to grow courtesy of 2024 state legislative sessions. The additions bring the total number of state laws to 19 while bringing several new compliance dates for privacy professionals to keep in mind. This updated IAPP resource outlines all the key dates associated with state privacy law compliance.Full story
The precision nutrition movement could present several medical data privacy issues as devices, such as commercial glucose-monitoring management, are now being sold on the market, IAPP Research and Insights Analyst Cheryl Saniuk-Heinig, CIPP/E, CIPP/US, writes.
The U.K. Information Commissioner's Office issued a report addressing challenges organizations face when trying to adopt privacy-enhancing technologies. The report presents its research and stakeholder feedback on barriers to adopting PETs while also offering recommendations to overcome those barriers. Full story
The International Advertising Bureau Diligence Platform is now available to aid U.S. comprehensive state privacy law compliance across the digital advertising ecosystem. IAB CEO David Cohen said, "We're committed to giving the ecosystem the tools it needs to navigate these (compliance) challenges confidently while maintaining strong data privacy standards.
Latvia's Data State Inspectorate published guidance on personal data collection from educational surveys. The regulator promoted personal privacy principles in survey response collection while advising schools and teachers to ensure "clear purpose and legal basis of data processing is known."Full story
The Czech Republic's data protection authority, the Úřad pro ochranu osobních údajů, said it is worried about institutions such as schools, museums, cultural entities and more replacing or reducing the duties of data protection officers. The regulator observed "an external service" replacing DPOs in some instances.