A coalition of 108 stakeholders spanning civil society and industry joined on a letter to the European Commission opposing the reopening and simplification of the EU General Data Protection Regulation.
U.S. Sen. Mark Warner, D-Va., led a group of Senate Democrats on the introduction of the Defending Our Government's Electronic data: Bolstering Responsible Oversight and Safeguards Act. The bill aims to prevent the U.S. Department of Government Efficiency's efforts to obtain individuals' personal information from government agencies. Sen.
Members of Norway's data protection authority, Datatilsynet, discussed how "privacy (is) under pressure" as the country deals with growing surveillance concerns while digitizing operations and services.
As organizations begin to use AI for advertising purposes, stakeholders raise concerns about the potential ethical implications of the technology. IAPP Westin Research Fellow C. Kibby said the "ethical use of AI in marketing is not only instrumental for fostering consumer trust, but also for making the most out of the technology itself as businesses are able to align their AI systems with social norms and values."Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, issued a 900,000 euro fine to data broker Solocal Marketing Services over alleged consent violations under the French Post and Electronic Communications Code and the EU General Data Protection Regulation.
The U.S. Government Accountability Office released a report detailing financial institutions' use of AI technology and the potential privacy concerns associated with using the tech. While the tech can be beneficial to companies looking to bolster efficiency, the GAO recommended the National Credit Union Administration "update its model risk management guidance to encompass a broader variety of models used by credit unions."Full story
Microsoft filed a lawsuit against information-stealing malware company Lumma Stealer after 400,000 Microsoft computers were affected by the company's malware, Reuters reports.
The European Commission Wednesday presented a plan to simplify the Digital Single Market, which includes targeted reform of the EU General Data Protection Regulation.
The U.S. Federal Trade Commission finalized its order against GoDaddy, after the company allegedly misled consumers about its data protection safeguards. The FTC claimed the company did not implement sufficient data protection measures and was not compliant with EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.
Regulators' cybersecurity efforts will have to evolve to continue to work against growing cyber threats as hackers begin to use AI to carry out large-scale cyberattacks, IAPP Cybersecurity Law Center Managing Director Jim Dempsey wrote in an article for RSAC Conference.