Three quarters of chief information security officers are considering a career change, Techopedia reports, citing IANS Research and Artico Search's "State of the CISO 2023-2024 Report." The report, which surveyed 660 security professionals in the U.S.
A majority of Australia's small businesses are currently exempted from the country's Privacy Act, but that might be changing. As reforms to the Privacy Act are considered, there's a proposal to eliminate the exemption for businesses with an annual turnover of AUD3 million or less. IAPP Legal Research Associate Alyanna Apacible-Bernardo analyzes the current and future state of SME regulation if the exemption is lifted.Full story
South Korea's Personal Information Protection Commission announced the creation of a policy plan for data used toward behavioral advertising. The policy mandates all data processing of online behavioral information for customized advertising must respect a user's right to consent to further processing of their data at each stage of the data's life cycle.Full story
As Africa's digital transformation takes greater hold across the continent, issues remain in the 35 countries that have passed data protection legislation. Digital rights advocacy group Access Now recently held a forum to present findings of their report "Strengthening data protection in Africa: Key issues for implementation," which explores some of the legal exemptions and a general lack of independence within African nations' data protection regimes.
The IAPP Research and Insights team updated the "Key Dates of Federal Data Privacy Reform in Australia" infographic. The updates reflect reform developments from the end of 2023 and expectations for the initiative in 2024.Full story
The Court of Justice of the European Union ruled law enforcement storing biometric information for someone convicted of a crime indefinitely is against the spirit of the law. The court called for national legislation to require data controllers to periodically review stored data and decide whether it is still needed, and also give people the chance to have that data erased.Full story
The IAPP Research and Insights team updated its infographic mapping out all of the EU stakeholders involved with rulemaking initiatives. The infographic provides an overview of each institution and their role in the privacy-related legislation rulemaking process.Full story
South Korea's Personal Information Protection Committee launched a 12-person committee dedicated to managing overseas data transfers. The committee will review content to determine if it should fall under national or international protective standards.Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, sanctioned the National Social Security Institute and the Federal District State Department of Education for violating personal data processing laws. The ANPD found the INSS did not inform data holders of a security breach.
European Parliament's Committee on Civil Liberties, Justice and Home Affairs adopted a proposal to expand exemptions to the e-Privacy Directive for child sexual abuse material monitoring until May 2025.Full story