The Belgian presidency of the Council of the European Union proposed internal changes to prioritize digital policy, Euractiv reports. Belgium suggested a new working party could help globalize digital matters.
The hacker in the 2021 T-Mobile data breach who stole the data of 40 million consumers allegedly faces a U.S. indictment, 404 Media reports. John Erin Binns admitted to hacking T-Mobile's database and selling the data to a third party. Binns is allegedly accused of hacking, money laundering, identity theft and wire fraud offenses.Full story
The U.S. Securities and Exchange Commission's X, formerly known as Twitter, account was hacked after someone gained access to a phone number associated with the account, Reuters reports. X claimed the platform is not responsible for the breach despite security experts suggesting the platform work to strengthen cybersecurity measures. Full story
IAB Tech Lab found challenges advertisers will face while testing Google's Privacy Sandbox, MediaPost reports. The sandbox reportedly faces difficulties supporting "high-value" advertising formats, such as digital video and "competitive ad separation." IAB also shared concerns that involve brand safety and traditional ad fraud.Full story
The Office of the Australian Information Commissioner launched an initial inquiry into whether TikTok is harvesting users' personal data without consent, the Guardian reports. The investigation will examine the use of marketing pixels, which follow people's online habits and can collect data outside of the app's usage. A TikTok spokesperson said pixels comply with the law.Full story
The U.S. Consumer Financial Protection Bureau proposal to put the same kinds of privacy and transparency regulations on digital wallets as it does on banks is getting resistance from major technology companies, Reuters reports. A letter to the CFPB from the Computer & Communications Industry Association said it failed to identify certain risks and additional regulation would hinder innovation.
After the European Data Protection Board ruled Meta could no longer use contractual necessity or legitimate interest as legal bases to process personal data for targeted advertising purposes, IAPP Westin Research Fellow Andrew Folks, CIPP/US, writes the company has "exhausted" all legal options, "save one: consent." Folks recapped the origins of user consent as an EU legal basis for processing personal data and analyzed how Meta's attempt to operationalize its model will be viewed by data protection authorities.
The New Jersey Legislature granted final passage to a comprehensive privacy bill, Senate Bill 332, on the final day of the 2023 legislative session. The bill was amended to its comprehensive framework in December 2023 before receiving same-day approval from the Senate and Assembly 8 Jan. Notably, SB 332 contains attorney general rulemaking authority as well as provisions for universal opt-out mechanisms and unique children's privacy provisions.
Global Cyber Strategies' Justin Sherman and Devan Desai wrote for Lawfare unpacking the U.S. Federal Trade Commission's plan to update the Health Breach Notification Rule. The proposed update could determine how health care apps and telehealth services collect and share health data with third parties.Full story
Tech Policy Press compiled the first amicus briefs filed in the NetChoice v. Bonta case concerning the constitutionality of California's Age Appropriate Design Code Act. The case, which is before the U.S.