The Markup reports on efforts to ensure the now-bankrupt data broker company Near did not sell its sensitive data as it looks to offload its assets. Restrictions were placed on the sale after U.S. Sen Ron Wyden, D-Ore., urged the U.S. Federal Trade Commission to protect customers' location data.Full story
Political advertising must be clearly labeled and targeting techniques online will only be allowed after consent is given under new European Parliament rules. The rules next move to the European Council where, if adopted, they will enter into force 18 months later.Full story
U.S. state and federal regulators are investigating a September 2023 cyberattack on MGM Resorts International, Reuters reports.
Italy's data protection authority, the Garante, announced a 30-day comment window for public input on the retention period for employee emails. It has deferred recent guidance on the metadata storage timeline of emails after receiving several requests for clarification.Full story
The Office of the Privacy Commissioner of Canada announced it will investigate a data breach of Global Affairs Canada that stole personal data from employees and online users. The OPC will "examine the adequacy of the safeguards that are in place to protect personal information and assess compliance with the Privacy Act."Full story
The California Privacy Protection Agency Board will hold its next public meeting 8 March. The major agenda item is a discussion on taking potential action to advance draft automated decision-making technology regulations to the formal rulemaking phase.
The U.K. Information Commissioner's Office opened the second round of its generative artificial intelligence consultation. The consultation will focus on how purpose limitation should be applied at all phases of the generative AI life cycle. The first ICO generative AI consultation focused on the legality of processing data scraped from the internet for generative AI models.
A member of European Parliament said the proposed U.K. Data Protection and Digital Information Bill could impact the adequacy decision between the EU and the U.K., Euractiv reports. The two entities' current data transfer agreement acknowledges U.K. data protection standards are equivalent to the EU General Data Protection Regulation, but Dutch MEP Paul Tang said the proposed U.K.
The U.K. Information Commissioner's Office ordered Serco Leisure to stop using facial-recognition technology and fingerprinting to monitor worker attendance. The agency said the company did not show why the biometric tracking was necessary.
The Swedish data protection authority, Integritetsskyddsmyndigheten, is looking for data protection officers to participate in a reference groups to get input on draft guidance. Interested parties have until 8 March to register.Full story