The California Privacy Protection Agency will hold a public hearing 14 Jan. for people to offer statements and opinions on several of its proposed rules, including those concerning cybersecurity audits, risk assessments and automated decision-making technology, under the California Consumer Privacy Act. The initial public comment period for the formal rulemaking closes the same day as the hearing.Full story
As part of its 25th anniversary, the IAPP will celebrate 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week we look back on the impact of groundbreaking information privacy scholar Alan Westin.Full story
With India's draft Digital Personal Data Protection Act rules recently moving to the public consultation stage, the country is one step closer to joining other globally recognized data protection standards. Kaitan & Co.
The Biden administration is working to finalize an executive order that could strengthen cybersecurity safeguards and allow government agencies to implement encryption and various security practices, Bloomberg reports.
The U.K. Competition and Markets Authority announced it will conduct status investigations in three areas of digital competition practices in the first six months of 2025. The new CMA regime will investigate opportunities to spur innovation, investment and growth in the U.K.'s technology sector, and ensure citizens and businesses that depend on digital markets receive fair treatment.Full story
European Commission officials are internally raising concerns over their reliance on Microsoft 365 and perceived privacy and security issues, according to Euractiv. The concerns focus on prior findings by the European Data Protection Supervisor regarding alleged insufficient safeguards for sensitive and confidential data when transfers of Commission data occur with Microsoft365 use, which led the Commission to sue the EDPS.
The U.S. Department of Homeland Security released a guide for government officials looking to use generative AI to improve the delivery of services. The guidance includes a breakdown of steps DHS took to develop its own AI applications, including seeking user feedback and hiring and training technical talent.Full story
Euractiv reports The Court of Justice of the European Union issued a preliminary decision regarding the frequency of EU General Data Protection Regulation complaints and their consideration by data protection authorities. The court indicated DPAs are not permitted to dismiss GDPR claims based on perceived excessiveness and must review each claim appropriately.
The U.S. Consumer Financial Protection Bureau recognized the Financial Data Exchange as a standard-setting body under the agency's financial data rights rule. It will allow FDX to set standards for companies to follow in order to comply with the rule, which requires data providers to make covered data for financial products available to customers in digital form.Full story
Hong Kong's Office of the Privacy Commissioner for Personal Data updated its guidelines for using cloud computing to improve data protection. The guidelines now include updated recommendations for "service and deployment models, standard services and contracts as well as outsourcing arrangements." Meanwhile, the PCPD published its findings in a data breach investigation of the Urban Renewal Authority.Full story