Articles from Around the Web

Operational impacts of India's DPDPA, Part 8: Data audits for significant fiduciaries

The introduction of concepts for data fiduciary and significant data fiduciary is one of the many key elements presented within India's Digital Personal Data Protection Act. Several obligations are tied to each role, including required data audits. Samvad Partners Partner Nivedita Nivargi, Principal Associate Kevin Robin and Senior Associate Saurabh Roy explain data audits under the law and how significant fiduciaries must approach them. Editor's note: This is the eighth in a 10-part series on the operational impacts of India's DPDPA.

South Korea's PIPC fines retailer for data transfer rules violation

South Korea's Personal Information Protection Commission announced a KRW1.978 billion fine against online retailer AliExpress related to alleged violations of international data transfer rules under the Personal Information Protection Act. An investigation showed South Koreans' personal data was being shared with approximately 180,000 Chinese companies without consent or legal basis for processing.

Kenya pauses digital identification system

The High Court of Kenya paused the national digital identification system after advocacy groups claimed the program does not have the appropriate safeguards to protect citizens' personal data, Biometric Update reports. The court will decide in September if the Maisha Namba program's policies and use of biometric data are unconstitutional.Full story

LLM development creates legal basis questions regarding data processing

The development of large language models is raising questions over the legal basis for artificial intelligence developers using personal data in the training of their models.

Key requirements in Brazil's DPO regulation

The recently issued regulation outlining the role of a data protection officer under Brazil's General Data Protection Law was a key step in advancing the regulatory agenda of the Autoridade Nacional de Proteção de Dados for the 2023-2024 biennium, Organon & Co. Privacy and Data Protection Associate Director Guilherme Peretti, CIPP/E, CIPP/US, CIPM, FIP, CDPO/BR, writes.

UK nonprofit claims Apple underreported CSAM

The National Society for the Prevention of Cruelty to Children claimed Apple did not report child sexual abuse material on its iCloud, Facetime and iMessaging platforms, the Guardian reports. The NSPCC said Apple allegedly significantly undercounted the amount of CSAM material on its platforms. Full story

Operational impacts of the EU AI Act, Part 2: Understanding and assessing risk

The EU Artificial Intelligence Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.

European Commission publishes GDPR implementation report

The European Commission adopted its second report on the state of EU General Data Protection Regulation implementation. The report discusses application of the law since its entry into force, building off the inaugural implementation report in 2020. The Commission cited and outlined potential steps to improve "robust enforcement," data protection authority support, and "consistent interpretation and application."Full story

NIST issues guide for small businesses to implement the RMF

The U.S. National Institute of Standards and Technology published a guide for small businesses to begin implementing the NIST Risk Management Framework. The document serves as an introduction for organizations to design an information security and privacy risk management program.Full story

FTC says hashed personal data is not anonymized

The U.S. Federal Trade Commission's Office of Technology discussed the agency's perspective on companies hashing personal data. According to FTC staff, hashing data creates difficulty around reidentifying the original data subject, however, it is misleading for companies to claim hashing personal information makes it anonymous.Full story

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

Operational impacts of India's DPDPA, Part 8: Data audits for significant fiduciaries

South Korea's PIPC fines retailer for data transfer rules violation

Kenya pauses digital identification system

LLM development creates legal basis questions regarding data processing

Key requirements in Brazil's DPO regulation

UK nonprofit claims Apple underreported CSAM

Operational impacts of the EU AI Act, Part 2: Understanding and assessing risk

European Commission publishes GDPR implementation report

NIST issues guide for small businesses to implement the RMF

FTC says hashed personal data is not anonymized

Stay Updated with Compliance Insights

Search form

Search form

Search form

Articles from Around the Web

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

Stay Updated with Compliance Insights