When she looks at a piece of artwork hanging prominently in her office stating, "I am not data," Chevron Privacy Counsel Paige Boshell, CIPP/E, CIPP/US, CIPM, FIP, PLS, thinks of "every person my decisions, or my advice, will impact." Boshell tells IAPP Associate Editor Jennifer Bryant about how her start as a financial services regulatory lawyer blossomed into a privacy career that she is "energized" by every day.Full story
The U.S. Federal Trade Commission released the agenda for its annual PrivacyCon event 6 March. The program will open with remarks from FTC Chair Lina Khan before breaking into seven panel discussions covering privacy, data security and artificial intelligence matters. Panels will cover health data privacy, privacy-enhancing technologies and design analysis, mobile device security, and AI and machine learning.Full story
Reuters reports BNSF Railway agreed to pay USD75 million to settle a class-action lawsuit claiming its use of biometrics violated Illinois state law. The lawsuit claimed the company collected fingerprints at automated gate systems. BNSF did not admit liability.Full story
Denmark's data protection authority, Datatilsynet, noted concerns about schools' online system migration efforts following the Chromebook case.
Artificial intelligence surveillance camera company Flock allegedly violated driver safety and privacy laws in several U.S. states with its AI license plate reader, Forbes reports. The company was accused of not obtaining the proper permits before installing the cameras for law enforcement agencies. Flock said it "operates to the best of our abilities within the bounds of the law."Full story
Generative artificial intelligence startup Codified announced it raised USD4 million in seed funding, Tech Observer reports. Codified aims to use AI to increase "reliance on business data for insights and the growing concerns over data security and privacy."Full story
The California Privacy Protection Agency announced its support for a bill introduced to the California State Assembly regarding universal opt-out preference signals. Assembly Bill 3048 would require browsers and devices to offer consumers the ability to exercise their consent choices through preference signals.
Sweden's data protection authority, the Integritetsskyddsmyndigheten, released its annual report 2023. The IMY indicated it will continue prioritizing guidance for data protection compliance and innovative technology such as artificial intelligence. The report highlighted recently completed projects on a federated learning AI model for health care systems and public safety sensors in place of surveillance cameras.Full story
The U.S. National Institute of Standards and Technology finalized an update of its Cybersecurity Framework, which was last updated in 2014. The CSF 2.0 supports implementation of the U.S. National Cybersecurity Strategy with a broadened scope beyond protecting critical infrastructure and includes resources and best practices applicable to organizations across all economic sectors.
South Africa's Information Regulator announced its first direct marketing enforcement under the Protection of Personal Information Act. The regulator ordered technology consultancy FR Ram Consulting to amend its direct marketing practices to ensure proper consent is obtained before interacting with consumers through various marketing communications.