The U.S. Federal Trade Commission announced approximately 800,000 consumers will be notified of refunds from a USD7.8 million privacy settlement between the agency and online therapy provider BetterHelp.
The Straits Times reports on a proposed update to a law giving Singapore's Cyber Security Agency more oversight of high-risk computer systems. The bill would require critical information infrastructure operators to disclose any outages and attacks that affect their servers under the Cybersecurity Act.Full story
The Office of the Privacy Commissioner of New Zealand released compliance reviews for three major credit reporting companies for the 2022-23 period. The agency found no issues with the companies' practices under the Credit Reporting Privacy Code.Full story
Germany's Conference of the Independent Data Protection Authorities issued guidance stating generative artificial intelligence will create multiple data privacy issues under the EU General Data Protection Regulation, Bloomberg Law reports. The DSK's advisory reminded entities using AI to establish intended use and a legal basis for processing training data while enabling data deletion and correction rights.
Trade union leaders from 11 European countries asked respective data protection authorities to examine Amazon's employee monitoring practices, Euronews reports. Their request comes after France's DPA, the Commission nationale de l'informatique et des libertés, fined the retail giant for excessive surveillance claims, which Amazon has disputed.Full story
A cyberattack on the U.K. Ministry of Defense's payroll contractor breached the personal information of current and former U.K. military members, BBC News reports. The data breach stole "personal (HM Revenue and Customs)-style information," though it did not affect the military's operational systems.Full story
The U.S. District Court for the Northern District of California approved Google's USD62 million privacy settlement, awarding USD42 million to advocacy groups and USD18 million to attorneys, Reuters reports. The class-action lawsuit claimed Google collected and stored location data without consumers' consent.Full story
A cursory search of the American Privacy Rights Act discussion draft does not yield the term "personal data." IAPP Westin Research Fellows Andrew Folks, CIPP/E, CIPP/US, CIPM, and Luke Fischer explain how drafters "eschewed attaching the modifier 'personal' to the elemental definition of the data it covers," instead using a "covered data" terminology that "draws heavily from privacy and data protection regimes in the states and abroad."Full story
The U.S. House Committee on Energy and Commerce published a blog post touting the benefits a national data privacy standard, such as the proposed American Privacy Rights Act, could bring for small businesses.
The IAPP will host a LinkedIn Live 9 May covering the potential implications of the Protecting Americans' Data from Foreign Adversaries Act, a new law prohibiting data brokers from selling sensitive data to foreign adversaries. Panelists will walk through the new rules and requirements while exploring how companies are preparing.Full story