The European Data Protection Board published several recommendations for the European Commission's proposed financial data access and payments package. It said there must be clear rules for recording and disclosing personal data, obligations for account and payment initiation service providers, and more clarification around what counts as sensitive payment data.Full story
Meta proposed limits on its sharing of certain personal data from all advertisers in order to comply with U.K. Competition and Markets Authority requests, Reuters reports. The CMA accepted Meta's proposals on a provisional basis and will take public comment on the issues until 14 June.Full story
Denmark's data protection authority, Datatilsynet, completed several inspections of businesses and public entities related to personal data breaches.
The passage of the European Health Data Space "raises unique challenges" for the use of health data for research and innovation, Covington & Burling Of Counsel Kristof Van Quathem writes.
The Netherlands' data protection authority, the Autoriteit Persoonsgegevens, said a government proposal to better protect credit registration data needs more safeguards. The AP argued the bill needs to require shorter storage time for sensitive data and the information should be deleted after a credit agreement is reached.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. He explores the complex landscape around meeting children's privacy needs in the connected world and the advancements that took place this week.Full story
The National Records of Scotland experienced a ransomware attack that stole 3 terabytes of sensitive data from National Health Services, Infosecurity Magazine reports. The NRS said it has contacted patients whose personally identifiable information was breached.Full story
The U.S. House Committee on Energy and Commerce Subcommittee on Data, Innovation and Commerce approved the updated American Privacy Rights Act draft on a voice vote 23 May, advancing the bill to full committee consideration. While approval brings hope for an eventual House floor vote, the markup session presented some of the most clear displays of targeted opposition to date from a number of subcommittee members.
South Korea's Personal Information Protection Commission fined platform company Kakao a record KRW15.1 billion due to an alleged lack of safeguards to protect personal information in its open chat feature, Pulse reports.
IAPP Principal Researcher Saz Kanthasamy, CIPP/E, CIPM, FIP, and Westin Fellow Luke Fischer write about the importance of benchmarking following member input in the IAPP governance survey. They note the survey can help members see where they stand in relation to their peers and how to apply the information to better their institution.Full story