Quebec's data protection authority, the Commission d'accès à l'information du Québec, laid out in a new guidance document what personal information can be collected during the recruitment process and considerations for maintaining necessity and proportionality. Full story
Advocacy group Privacy International filed a complaint against the U.K. over its use of Technical Capability Notices after the U.K. allegedly sent a TCN to Apple ordering the company to provide the government with consumers' personal data for investigative purposes.
The U.K. National Cyber Security Centre issued guidance urging companies to bolster their information systems by 2035 to ensure data is protected against quantum technology that could be used to hack encrypted data, the Guardian reports.
France's data protection authority, the Commission nationale de l'informatique et des libertés, discussed AI innovation and personal data protection with France's competition regulator, the Autorité de la concurrence. The CNIL said the authorities' joint cooperation aims to analyze AI development and the potential effect the technology has on both consumers and the economy.Full story
Clearview AI allegedly tried to purchase consumer information, including 690 million criminal records and 390 million Social Security numbers, from investigation company Investigative Consultant for its facial recognition system, 404 Media reports. The deal was agreed to but ultimately fell through over utility of data, resulting in court-mediated arbitration.Full story
The European Commission determined technology companies Apple and Google violated the Digital Markets Act by using elements of their market dominance to block out competitors, The New York Times reports.
The White House fired Democratic FTC Commissioners Alvaro Bedoya and Rebecca Kelly Slaughter, according to multiple media reports and public statements 18 March, leaving two Republicans and no minority party representation on the agency's five-commissioner bipartisan bench. IAPP Staff Writer Joe Duball reports on the expulsions and the subsequent ripples the actions may have on the U.S. consumer protection landscape.Full story
The Network Advertising Initiative recently released its new Self-Regulatory Framework. The framework is principles-based and intended to allow NAI members to adopt more flexible approaches to comply with U.S. state and federal privacy requirements. IAPP Staff Writer Alex LaCasse spoke with NAI President and CEO Leigh Freund about the association's new initiative.Full story
The U.K. Department of Science, Innovation and Technology opened a public call for evidence 17 March seeking information on how data brokers' business activities may pose a potential risk to national security. Stakeholders are invited to answer a 41-question survey prior to 13 May featuring four subject areas: definition and services of data brokers, national security, security and regulatory frameworks, and consumer awareness and transparency.
The European Data Protection Board approved a document outlining the procedure to be followed for data controllers and processors with the use of binding corporate rules for data transfers. Under the new procedure, BCRs must be approved by the relevant national data protection authority under the EU General Data Protection Regulation's consistency mechanism contained in Article 63.