The U.S. Federal Communications Commission announced fines totaling USD200 million to wireless carriers AT&T, Sprint, T-Mobile and Verizon over alleged nonconsensual geolocation data sharing, The Wall Street Journal reports.
France's data protection authority, the Commission nationale de l'informatique et des libertés, introduced a self-assessment tool for binding corporate rules. The tool allows companies that transfer personal data outside of the EU to "check the level of maturity of the project in relation to the requirements of the BCR standards adopted by the European Data Protection Board."Full story
The Global Cross-Border Privacy Rules Forum marked its second anniversary by announcing the appointment of accountability agents working in five jurisdictions tasked with certifying organizations' compliance with the Global CBPRs and Global Privacy Recognition for Processor Systems.
Finland's District Court of Western Uusimaa sentenced hacker Aleksanteri Kivimäki to six years in prison for a cyberattack that stole the data of 33,000 Vastaamo therapy patients, Yleisradio Oy reports. Kivimäki was also charged with aggravated blackmail after he threatened to "spread the sensitive patient data on the dark web" if the company did not pay him 370,000 euros in Bitcoin.Full story
The European Commission introduced two tools to anonymously report violations of the Digital Services Act and the Digital Markets Act. The tools ensure that whistleblowers' data is encrypted, "guaranteeing the complete privacy of the whistleblower in all its communications with the Commission."Full story
The U.K. Information Commissioner's Office urged health care organizations to improve data protection efforts after individuals' HIV statuses were targeted in data breaches.
The U.S. Department of Commerce announced new draft guidelines from the National Institute of Standards and Technology related to President Joe Biden's executive order on safe and trustworthy artificial intelligence. The NIST draft guidance covers AI risk management, digital content transparency and risks posed by datasets used in generative AI systems. The comment deadline for all drafts is 29 July. Meanwhile, the White House announced U.S.
In an op-ed for The Hill, U.S. Department of Health and Human Services' Office of Civil Rights Director Melanie Fontes Rainer touted the recently approved Health Insurance Portability and Accountability Act rule on the disclosure of individual's reproductive health data in legal investigations.
The U.S. Federal Trade Commission updated the Health Insurance Portability and Accountability Act's Health Breach Notification Rule. The revised rule includes updated definitions to "underscore application" to health apps and "similar technologies not covered by HIPAA." Changes to the consumer and agency breach notice requirements are also included.
The second AI Safety Summit hosted virtually by the U.K. and South Korea in May is drawing less fanfare than the first summit last year, Reuters reports. Leading artificial intelligence policymakers from the EU and the U.S. are uncertain about attending the 21-22 May summit, while Canada and the Netherlands have declined the invite.