EDPB overturns daily fines against Meta by Norway's DPA
The European Data Protection Board ruled in favor of Meta's appeal of daily fines imposed by Norway's data protection authority, Datatilsynet, for ongoing use of behavioral advertising.
The European Data Protection Board ruled in favor of Meta's appeal of daily fines imposed by Norway's data protection authority, Datatilsynet, for ongoing use of behavioral advertising.
The U.S. Federal Trade Commission referred its children's privacy probe into TikTok data practices to the Department of Justice, Politico reports. The FTC investigation centered around alleged Children's Online Privacy Protection Act Rule violations that breached a 2019 consent order reached by TikTok's predecessor, Musical.ly.
Finland's Office of the Data Protection Ombudsman updated its guidance on how organizations should manage data protection officers. It includes explicit reminders on supporting DPOs in their duties, proper resourcing and how officers "may not be fired or punished for handling data protection tasks."Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, opened a 30-day comment period on its children and adolescents' data processing regulatory project. The ANPD encouraged feedback to focus on issues such as the best interests of the minors, consent from parents and guardians, and the transparency of processing operations.Full story
Denmark's data protection authority, Datatilsynet, released guidance on EU General Data Protection Regulation compliance for small associations to ensure personal data is collected, stored and deleted properly.
South Korea's Personal Information Protection Commission published guidance for personal information processors to ensure the use of data protection safeguards. The guidance details encryption and security methods for personal information collected and stored by processors.
The U.K. Information Commissioner's Office announced the conclusion of its investigation into Snap's "My AI" chatbot and closure of the enforcement notice. Following the ICO issuing a preliminary notice for possible U.K. General Data Protection Regulation violations in October 2023, Snap released a revised data protection impact assessment, which met the requirements of Article 35 of the U.K. GDPR.
The European Data Protection Board announced Croatia's Data Protection Agency Director Zdravko Vukić was elected as deputy chair.
Messaging service Signal's President Meredith Whittaker said the company would rather "cease operations" than comply with anti-encryption laws and social media surveillance tools allegedly used by law enforcement, the Guardian reports. Whittaker said the company "will fight until the end to ensure that as many people across the globe have access to meaningful privacy."Full story
The Vermont General Assembly was unable to override Gov. Phil Scott's, R-Vt., veto of the state's comprehensive privacy bill that included a precedent-setting private right of action. Washington University School of Law professor Neil Richards and Boston University School of Law professor Woodrow Hartzog offered their take on the justification for the veto and why the stigma attached to the PRA "suggests that companies ought to be above the law" in relation to consumer harms.Full story