Nova Scotia's Office of the Information and Privacy Commissioner launched an investigation into a cyberattack that breached the data of 100,000 people, CBC News reports. The office said the cyberattack on MOVEit, a file transfer service used by provincial government departments, Nova Scotia Health and the IWK Health Centre, received 110 privacy complaints since June.Full story
The final trilogue negotiation for the proposed EU AI Act is proving as tenuous as expected. EU policymakers met for more than 20 hours 6 Dec. to try to carve out a deal on sharply debated topics before ultimately pausing talks. Negotiations are expected to restart 8 Dec. Hope remains for a political agreement between EU institutions ahead of parliamentary elections in 2024. IAPP Editorial Director Jedidiah Bracy provides a brief snapshot of where things stand.
U.S. lawmakers reached a tentative agreement on a temporary extension of Section 702 of the Foreign Intelligence Surveillance Act, NBC News reports. The extension will be included in the National Defense Authorization Act and would allow the Section 702 program to continue through April.
The European Data Protection Board published the text of its urgent binding decision instructing Ireland's Data Protection Commission to institute a European Economic Area-wide ban on Meta's personal data processing toward behavioral advertising.
Members of the Council of the European Union agreed to a negotiating stance on the proposed European Health Data Space. The EHDS would give citizens better access and control over their personal electronic health data and facilitate a single market for digital health services and products.Full story
Brazil's Federal Prosecution Office is joining nonprofit Sigilo in pursuit of compensation to more than 220 million individuals affected by Experian's 2021 data breach, according to The Brazilian Report.
Meta announced the launch of end-to-end encryption by default for Facebook and Instagram messaging, The Wall Street Journal reports. Fully encrypted messages raise concerns that child predators' illegal activity on social media could be protected.
U.S. Sen. Ron Wyden, D-Ore., claimed in a letter to the Department of Justice that undisclosed governments can monitor individuals through mobile device push notifications, Reuters reports. Wyden said information gets processed through Google or Apple servers prior to a notification, making the information susceptible to foreign government surveillance.
The Court of Justice of the European Union rendered a decision prohibiting certain automated credit scoring and extended data retention practices under the EU General Data Protection Regulation. The scoring practices of German credit bureau SCHUFA generally contradict GDPR provisions on the use of automated decision-making technology.
European Parliament's Committee on Industry, Research and Energy advanced a draft report on the Cyber Solidarity Act, Euractiv reports. The draft includes amendments, budget discussions and strategies to eliminate cybersecurity risks such as threat information sharing. Parliament hopes to begin negotiations among EU institutions in 2024.Full story