Lithuania's State Data Protection Inspectorate fined the second-hand clothing trading website Vinted 2,385,276 euros for alleged noncompliance with the EU General Data Protection Regulation. The regulator claimed violations of GDPR principles for transparency and accountability around data subject access rights.
Norway's data protection authority, Datatilsynet, is launching a summer campaign to bring awareness to the rules around cameras in the workplace. The regulator notes employees are not always properly informed about camera use and employers do not always use them to check work efforts.Full story
Advertising technology companies are continuing to raise concerns that Google's Privacy Sandbox remains unprepared for launch, Business Insider reports. A recent Privacy Sandbox test of more than 100 publishers and 10 demand-side platforms by adtech firm Index Exchange found impressions declined 33% using Google's new technology.Full story
TechUK and other industry groups sent a letter to the U.K.'s leading political parties urging them to improve the nation's data protection framework after the election. "This will give businesses the confidence to invest in the UK, positioning the country ahead of other jurisdictions," the letter reads. Editor's note: The IAPP will host a LinkedIn Live 9 July on what's next for U.K.
Damien Kieran, former chief privacy officer at X, was appointed CPO at OpenAI CEO Sam Altman's startup, Tools for Humanity, The Wall Street Journal reports. Kieran joins the company amid concerns about its development of Worldcoin and processing of biometric data.Full story
Join the IAPP 9 July for a LinkedIn Live on digital policy in the U.K., following the general election occurring 4 July. The session will focus on possible digital innovation and governance policies the next U.K. government may pursue. Centre for Information Policy Leadership President Bojana Bellamy, CIPP/E, and Flint Global Director James Snook and will join IAPP Research and Insights Director Joe Jones in conversation.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, is opening a second public consultation on EU General Data Protection Regulation and Artificial Intelligence Act interactions. The CNIL aims to "provide legal certainty" to AI developers and deployers on web scraping, open source AI models and legal personal data processing while using AI models.
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, published a report on how automated surveillance tools used by government agencies were powered in part by algorithmic discrimination. The AP outlined the alleged public-sector instances of bias algorithms it observed while discussing its stance on artificial intelligence and privacy.Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, ordered Meta to immediately suspend its use of public Facebook and Instagram information to train its artificial intelligence systems. The ANPD argued alleged General Data Protection Law violations stemmed from insufficient terms of service updates, no legal basis for processing and insufficient children's privacy safeguards.
Evolve Bank and Trust announced it experienced a cyberattack that compromised the sensitive personal data of consumers including the information of finance company Affirm's cardholders, Reuters reports.