In a blog post, security and privacy researcher Lukasz Olejnik explained his EU General Data Protection Regulation complaint to Poland's data protection authority regarding OpenAI's ChatGPT data processing standards. Olejnik said the artificial intelligence software "systemically ignores the provisions of the GDPR regarding the processing of data for the purposes of training models within Chat-GPT."Full story
Meta asked the U.S. District Court for the District of Columbia to delay an administrative hearing in a lawsuit with the Federal Trade Commission over the monetization of teens' data, MediaPost reports. The lawsuit was filed by Meta after the FTC suggested altering an agreement with the company to ban the use of minors' data for advertisement targeting.Full story
Join IAPP Research and Insights Director Joe Jones and IAPP AI Governance Center Director Ashley Casovan as they lead a LinkedIn Live discussion 17 Jan. on their privacy and artificial intelligence governance predictions for 2024. Additionally, IAPP Principal Researcher, Privacy Law and Policy, Müge Fazlioglu, CIPP/E, CIPP/US, and IAPP Principal Researcher, Privacy Management, Saz Kanthasamy, CIPP/E, CIPM, FIP, will offer their analysis on the latest legal and privacy operation management trends they expect to emerge this year.
France's data protection authority, the Commission nationale de l'informatique et des libertés, published a draft guide for conducting transfer impact assessments for data transfers outside the European Economic Area. When conducting a TIA, the CNIL recommends data controllers know what data is being transferred, document the transfer tool used, understand the laws in the receiving country, identify and implement any supplemental measures and reevaluate the appropriate level of data protection necessary.
The U.S. Federal Trade Commission issued guidance for the secure storage of individuals' DNA data. The FTC recommended companies offering DNA testing kits have robust data security systems in place, due to the sensitive nature of DNA data.
The U.S. Federal Trade Commission will hold a virtual summit on artificial intelligence 25 Jan. The summit will convene a variety of stakeholders to discuss developments in AI technology. During the summit, there will be three separate discussions on the hardware and infrastructure required to support AI development, data use issues and AI-powered consumer applications.
The Amsterdam Court of Appeal reaffirmed its order telling the advertising company Criteo to stop placing cookies on consumers' devices without asking for consent first. The company had appealed the initial December 2023 ruling.
Denmark's data protection authority, Datatilsynet, published advice on how to handle 10 common data breach scenarios. The problems range from failing to delete data on digital tools, loss of devices with unencrypted data and sending emails to the wrong people due to relying on auto-completing forms.Full story
Austria's Data Protection Authority published an FAQ related to cookie and data protection laws. The topics cover everything from what cookies are to the DPA's jurisdiction over cookie violations and how disclosures around cookies and data protections need to be noticed and displayed on websites.Full story
Italy's data protection authority, the Garante, issued guidelines on protecting personal data associated with fitness trackers. The guidance suggests users disable unnecessary tracking options, regularly delete data and enable multifactor authentication. Full story