Analysis of 2023 ransomware activity showed groups were paid more than USD1.1 billion from companies to sell back data stolen during breaches, The Record reports. Last year, hackers used zero-day vulnerabilities and intensified "their operations and targeting high-profile institutions and critical infrastructure like hospitals, schools, and government agencies."Full story
In an op-ed with AdExchanger, ASG Solutions founder Arielle Garcia discussed how consumers can be harmed by targeted advertisements. "I'm disputing the misguided belief that the advertising industry has any interest in exercising the self-restraint necessary to not exploit this sensitive data in ways that cause harm," Garcia said. "Not when there's money to be made."Full story
Clearview AI is allegedly still collecting data from Australians despite the company being prohibited from collecting biometric data from residents since 2021, Crikey reports. The facial recognition software company claimed it can not tell which photos are of Australian residents if the information obtained is through a non-Australian server.Full story
Italy's data protection authority, the Garante, issued fines to four municipalities for failing to provide the contact information of their local data protection office to the agency. The sanctions are part of an ongoing campaign by the Garante to ensure municipalities provide contact information.
The government of Shanghai, China, will streamline international data transfer approvals to spur economic improvements, Reuters reports. The fast-track approval initiative is aimed at certain multinational companies and their ability to move their Chinese data out of the country.
IAB Tech Lab published a report analyzing challenges the advertising industry may face in adopting Google's Privacy Sandbox. The major concerns for advertisers identified in the report are essential event-based metrics, brand safety, on-browser computing implications and a lack of consideration for commercial requirements. With the release of the report, IAB opened a public comment period for stakeholders until 22 March.
In an op-ed in The Hill, U.S. Sen. Kirsten Gillibrand, D-N.Y., called for the establishment of a federal regulatory agency tasked with enforcing a national consumer data privacy law.
The BBB National Programs' Digital Advertising Accountability Program said Indeed and Glassdoor have updated their data collection notifications and cross-app data collection policies after a consumer complaint. Both platforms are now in compliance with the Digital Advertising Alliance's Self-Regulatory Principles for online interest-based advertising.Full story
Montefiore Medical Center agreed to pay USD4.75 million to the U.S. Department of Health and Human Services' Office for Civil Rights to resolve claims it failed to protect patient data under federal health privacy rules after an employee illegally accessed and sold patient data in 2013. The agreement stated it is not an admission nor a concession from either party that Montefiore violated the U.S. Health Insurance Portability and Accountability Act.
Google's Threat Analysis Group released a report on commercial surveillance vendors and the effect spyware has on personal privacy. The report outlines "who is involved in developing, selling, and deploying spyware, how CSVs operate, the types of products they develop and sell, and our analysis of recent activity."Full story