Several U.S. regulators have raised concerns over the potential privacy implications of vehicles' internal systems that could "seriously threaten Americans' privacy" by disclosing personal information about drivers, The New York Times reports.
The IAPP Research and Insights team and OneTrust analyzed the laws, policies and broader contextual history relevant to artificial intelligence governance in certain jurisdictions. The third analysis in the five-part series outlines the U.S.'s keys to governing the strategic, technological and compliance landscape for AI governance.Full story
Italy's data protection authority, the Garante, allowed OpenAI to reactivate ChatGPT in the country after meeting several conditions related to personal data processing under the EU General Data Protection Regulation, Reuters reports. OpenAI committed to providing "greater visibility of its privacy policy and user content opt-out form," while also providing a new opt-out form for EU citizens to decline ChatGPT using their personal data to train its model.
BBB National Programs' Children's Advertising Review Unit issued a compliance warning for applying its Advertising and Privacy Guidelines in the context of artificial intelligence. The guidelines warn companies using AI should be cautious of the technology deceptively advertising to children through AI-created deepfakes, product depictions created by AI and AI-generated imagery.Full Story
The U.S. Federal Trade Commission finalized its January order against data broker InMarket Media over claims of improper location data collection. Per the order, InMarket is barred from selling, sharing or licensing consumer location data and must delete such existing data if it does not obtain valid consent from customers.Full story
The U.S. Cybersecurity and Infrastructure Security Agency plans to roll out a voluntary pledge committing U.S.-based technology companies to strengthening cybersecurity standards under the agency's Secure by Design initiative, Wired reports.
Health insurance company UnitedHealth Group confirmed to the U.S. Senate Committee on Finance that it paid hackers USD22 million in ransomware payments, CNBC reports.
South Korea's Personal Information Protection Commission published guidelines for creating a data processing policy. The guidelines seek to assist organizations in developing their own data processing policies to facilitate compliance with the Personal Information Protection Act.Full story
Denmark's data protection authority, Datatilsynet, responded to an inquiry from the Children's Rights National Association, Børns Vilkår, that claimed social media platforms may violate age limit requirements set within the Danish Data Protection Act.
Israel's Ministry of Justice introduced a bill that allows alleged privacy violations to be included in class-action lawsuits.