The U.S. National Institute of Standards and Technology published a guide for small businesses to begin implementing the NIST Risk Management Framework. The document serves as an introduction for organizations to design an information security and privacy risk management program.Full story
The U.S. Federal Trade Commission's Office of Technology discussed the agency's perspective on companies hashing personal data. According to FTC staff, hashing data creates difficulty around reidentifying the original data subject, however, it is misleading for companies to claim hashing personal information makes it anonymous.Full story
A Consumer Reports survey found U.S. citizens are concerned about algorithmic decision-making in certain industries, including health care and housing. The survey collected responses from 2,022 individuals and found respondents have concerns about the use of AI for important decisions and possible inaccuracies with the technology.
India's Ministry of External Affairs announced a collaboration between India and the U.K. on a Technology Security Initiative as part of the India-U.K. 2030 Roadmap.
CrowdStrike's outage could cost U.S. Fortune 500 companies an estimated USD5.4 billion combined in insured losses, the Guardian reports. The company said it is working to bolster its cybersecurity standards after a faulty update led to a global IT outage.Full story
U.S. national security considerations involving the transfer of sensitive personal data to adversarial countries could present an opportunity to forge a multilateral treaty on cross-border data transfers, Baker McKenzie Privacy and Security Global Chair Brian Hengesbaugh, CIPP/US, writes. With the U.S.
In an op-ed for Forbes, SailPoint founder and CEO Mark McClain said businesses should focus on creating a foundational cybersecurity plan instead of building its security around individual regulations. McClain said, "the better job an organization does of establishing a strong security baseline, the easier it will be to make minor adjustments."Full story
The U.K. Office of Communications fined TikTok 1.875 million GBP for alleged inadequate responses to a formal inquiry seeking information on parental control features. TikTok originally responded to OfCom's request for information 4 Sept. 2023, but revised their submission in December 2023 after finding the data it provided was inaccurate.
Privacy tool webXray is aiming to find unwanted web tracking to increase personal privacy protections on the internet, Wired reports. Former Google staff privacy engineer and webXray founder Tim Libert said the tool aims to "give privacy enforcers equal technology as privacy violators."Full story
Members of the Digital Advertising Alliance will soon experience a major shift in how they deliver targeted advertisements to consumers. The DAA is launching a browser-based extension called WebChoices 2.0 that will replace current cookie-based opt-out mechanisms, which is expected to be released for general availability in late 2024.