The California State Legislature saw an uptick in artificial intelligence-targeted legislation prior to its 16 Feb. filing deadline for the 2024 legislative session, IAPP Westin Research Fellow Andrew Folks, CIPP/US, writes.
Digiday reports advertising technology vendors are beginning to explore how their ads are affected in Google's Privacy Sandbox. The companies are testing how Google's third-party cookie replacement plan will impact 1% of their revenues, which could make it difficult to understand the effects immediately.Full story
IAB Europe and several affiliates issued a letter to the European Data Protection Board regarding its potential action on Meta's "pay or OK" subscription model concerning targeted advertising. IAB Europe urged the EDPB to ground any potential decision in existing case law and refuted the notion that such a payment model amounted to compelling EU citizens to pay for data privacy.
Norway's data protection authority, Datatilsynet, fined the Norwegian Labor and Welfare Office NOK20 million for large-scale processing of personal data without proper safeguards and access controls. Datatilysnet opened its investigation in September 2023 and found "a number of breaches of the law."Full story
Ireland's Data Protection Commission will participate in the European Data Protection Board's 2024 Coordinated Enforcement Framework, which focuses on the right of access under Article 15 of the EU General Data Protection Regulation.
Hong Kong's Office of the Privacy Commissioner for Personal Data launched an investigation into a cyberattack on the South China Athletic Association that affected 70,000 members, the South China Morning Post reports. The SCAA said, due to an "unauthorised third-party intrusion," members' personally identifiable information may have been breached.Full story
The Office of the Privacy Commissioner of Canada launched an investigation into the development of the ArriveCAN app used by the Canada Border Service Agency. The probe follows a complaint about how the app's personal information protections were developed.Full story
The U.K.'s Information Commissioner's Office responded to reports that a staff member at The London Clinic allegedly tried to view the medical information of Catherine, Princess of Wales. The ICO said, "we can confirm that we have received a breach report and are assessing the information provided."Full story
Government Technology reports on growing privacy concerns around U.S.-based education technology vendors. A letter from U.S. Sen. Tom Cotton, R-Ark., to the U.S.
The IAPP updated its Global Privacy Law and DPA Directory with new legislation and relevant data protection authorities in more than 200 countries, IAPP Legal Research Associate Alyanna Apacible-Bernardo and Westin Fellow Luke Fischer write.