France's data protection authority, the Commission nationale de l'informatique et des libertés, released a report on data protection progress since the enactment of the EU General Data Protection Regulation. Since 2018, the CNIL has received 17,483 data breach notifications and "half of the violations (were notified) in less than 10 hours."Full story
South Africa's Information Regulator detailed its investigations into its enforcement of the Protection of Personal Information Act and the Promotion of Access to Information Act.
We know there's a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you.
The Office of the Privacy Commissioner of Canada published key takeaways from its investigation of the 2020 data breach of the Canada Revenue Agency sign-in portal and the Employment and Social Development Canada's "GCKey" authentication service. Recommendations include addressing privacy risks through programs and services, and conducting regular security assessments.Full story
Microsoft published a blog post detailing the company's commitments to keeping commercial and public-sector customers' data private when using its Microsoft Azure OpenAI Service and Copilot services.
Elections for the European Parliament take place 6-9 June. Results will have a trickledown effect on future shaping of the European Commission and the Council of the European Union.
The IAPP Research and Insights team and OneTrust analyzed the laws, policies and broader contextual history relevant to artificial intelligence governance in certain jurisdictions. The second analysis in the five-part series outlines the U.K.'s keys to governing the strategic, technological and compliance landscape for AI governance. Full story
U.S. Vice President Kamala Harris announced the White House Office of Management and Budget will issue its first federal government-wide policy for mitigating risks posed by artificial intelligence. The OMB directive includes mandates that federal agencies address risks posed by AI use, expand transparency, protect individuals' privacy and support responsible innovation.
The Kentucky House voted 94-0 on concurrence and final passage of House Bill 15, a proposed comprehensive privacy law. The bill, modeled after Virginia's comprehensive law, contains requirements for data protection impact assessments, processing deidentified or pseudonymous data, user opt outs for targeted advertising and data sales, and a 30-day cure provision. If enacted, the bill will take effect 1 Jan. 2026.
The U.S. Federal Trade Commission published its Privacy and Data Security Update for 2023, noting enforcement actions taken in health care, children's privacy and artificial intelligence to protect consumer privacy. The FTC said it will continue to "push companies to bolster privacy protections for consumers and implement safeguards to secure consumer data."Full story