France's data protection authority, the Commission nationale de l'informatique et des libertés, released guidance on public Wi-Fi obligations. The guidance details the amount of time internet users' data can be stored and the safeguards needed to ensure public Wi-Fi complies with data protection standards.Full story
Digital rights advocates are urging the U.S. government to declassify documents showing the breadth of surveillance powers under Section 702 of the Foreign Intelligence Surveillance Act, Wired reports. The groups worry language in the most recent renewal of the law could overly expand the scope of surveillance in an attempt to target data centers.Full story
Sweden's data protection authority, the Integritetsskyddsmyndigheten, said in a legal opinion it will begin conducting investigations into search services involved in personal data violation complaints.
Hong Kong's Office of the Privacy Commissioner for Personal Data is urging cloud platform providers to make sure passwords and access security are valid and sufficient after three institutions suffered data breaches of content stored on ArcGIS Online. The agency is investigating how the breaches occurred, which, it said, stemmed from a user being able to access the data without using the designated login interfaces.Full story
The U.S. Supreme Court agreed in a 7-2 decision to uphold the Consumer Financial Protection Bureau's funding structure, The Washington Post reports. The CFPB's funding process was challenged for claims the system "violated the Constitution's command requiring congressional appropriation of money."Full story
A U.S. Senate working group released its roadmap proposal for addressing artificial intelligence after months of stakeholder dialogue. While it largely calls for leveraging of existing laws, the 31-page Senate document indicates certain mechanisms, like a federal privacy law, could go a long way toward addressing some key AI concerns. IAPP Staff Writer Caitlin Andrews details the highlights from the roadmap.Full story
As artificial intelligence technology enters into a wide variety of business functions, the IAPP Research and Insights Team invites industry stakeholders to take the 2024 IAPP Governance Survey to help understand the proliferation.
The U.S. National Institute of Standards and Technology issued finalized guidelines for federal contractors storing sensitive data, including employee health information and intellectual property.
Spain's data protection authority, the Agencia Española de Protección de Datos, updated its third-party cookie guidelines in response to the European Data Protection Board's opinion on pay-or-consent advertising models. The EDPB opined in April that models allowing users to pay a fee to opt out of targeted marketing did not offer a valid consent option.Full story
The U.S. Federal Trade Commission published an advisory regarding compliance requirements under an amendment to the Gramm-Leach Bliley Safeguards Rule. The rule has a reporting requirement compelling businesses to notify the FTC within 30 days of a security breach if it affects at least 500 people.Full story