The majority of Bermuda websites do not have a privacy notice and use unclear language if they do, according to a survey of online privacy protection the Privacy Commissioner Alexander White, CIPP/A, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, CIPT, FIP, conducted, The Royal Gazette reports.
Pakistan's military-run spy agency was given the authority to tap phone calls and messages to track down terrorist and criminal activity, Reuters reports. The army argued the surveillance would not be deployed against civilians but the move raises fears among some members of the Parliament of Pakistan that it would be used against them and pose privacy problems.Full story
A lawsuit filed to a U.S. court in California claimed fitness company Peloton shared user data with marketing firm Drift for artificial intelligence training purposes, IT Pro reports.
The Wall Street Journal reports it tested social media platforms' recommendations for teens and found Instagram allegedly promoted explicit content to underage users. The experiment claimed explicit content was found on Instagram Reels and promoted to users whose age was set to 13 years old.
The U.S. Federal Trade Commission and Los Angeles District Attorney's Office entered an enforcement settlement with the developers of anonymous messaging app NGL Labs that includes a ban on services to minors under 18 and a USD5 million fine.
The U.S. Federal Communications Commission entered a consent decree with a company offering call-assist technology for hearing-impaired persons to resolve an investigation into its alleged practice of unlawfully retaining call information beyond the duration of a call. CaptionCall will pay a USD34.6 million settlement, which is to be divided between investments in "privacy and data protection enhancements," civil penalties and other remedies.
The Global Privacy Enforcement Network announced it completed a review of more than 1,000 websites and apps, finding a vast majority employed at least one deceptive design pattern "that made it difficult for users to make privacy-protective decisions." The review involved officials from 26 global data protection authorities and was conducted between 29 Jan.-2 Feb.Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, issued a report on the influence deceptive and addictive design patterns have on users. The report illustrated how companies implement deceptive design patterns to maximize the amount of time users engage with their services, subsequently increasing the amount of personal data shared.Full story
Denmark's data protection authority, Datatilsynet, announced schools in 52 municipalities will cease data transfers through Google Chromebooks by 1 Aug. in compliance with a January order. The contracts have also been updated to ensure personal data is only processed within the municipality where it is generated.Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, along with the Ministry of Management and Innovation in Public Services created a platform for people to send petitions and potential complaints of violations of the General Data Protection Law.