Quebec's data protection authority, the Commission d'acces a L'information du Quebec, released guidelines for drafting privacy notices under Law 25. The guidance recommends what should be included in a privacy notice and relevant elements of data protection for consumers. The aim is to advance compliance and knowledge of privacy standards to protect customers' personal information.Full story
The Utah State Board of Education is considering a policy that would force public schools to share student data with charter schools for advertising purposes, The Salt Lake Tribune reports. Existing U.S. and state laws allow for student data to be shared to enable targeted charter school advertising, with the option for parents to opt out of data sharing. Full story
Trust Stamp announced it has partnered with Partisia to launch the GlobalSecure project to advance privacy and data security, Proactive reports. GlobalSecure is a tool to enable secure data processing without transferring data to third parties.
Two rulings by the Court of Justice of the European Union will impact credit rating agencies' ability to use automated decision-making and retain consumer insolvency data, Bird & Bird's Ruth Boardman and Nils Lölfing write.
U.K. Information Commissioner John Edwards issued an updated response to the proposed Data Protection and Digital Information Bill, which has been carried over to the 2023-2024 parliamentary session.
As application programming interfaces become commonly used by companies, Macher Tecnologia founder Alexandre Antabi writes, "flaws in design can lead to increased data leaks and misuse of information." Antabi said companies' technology teams can improve the data privacy and security of APIs by establishing a governance structure "similar to governance models for IT, data management, lineage and processes." Additionally, he suggested tech teams "should incorporate API security techniques as part of their development processes."
Twenty-one members of U.S. Congress want President Joe Biden to ensure the EU will enforce its Digital Markets Act for all companies, Reuters reports. Alphabet, Amazon, Meta and Microsoft, along with Chinese firm ByteDance, will be required to make their messaging services compatible with rivals, something lawmakers say unfairly targets U.S. companies and could hurt economic interests.Full story
A coalition of technology companies represented by trade group NetChoice filed a lawsuit challenging Utah's children's social media law, The Salt Lake Tribune reports. The Utah Social Media Regulation Act, set to take effect March 2024, states parents must give permission for minors to create a social media account, and users must have their age verified.
Comcast experienced a cyberattack affecting nearly 36 million customers due to a Citrix networking security vulnerability known as "CitrixBleed," TechCrunch reports. Comcast discovered an unauthorized actor most likely gained access to customer data, including personally identifiable information.
Maine-based retailer L.L. Bean testified against a data privacy bill introduced by state Rep. Maggie O'Neil, D-Maine, Politico reports. The opposition highlights the effect local and hyper-local businesses have on debates over comprehensive privacy legislation. L.L. Bean claimed it disagreed with the bill "as a longtime retailer that needs customer data for analytics and advertising."Full story