France's data protection authority, the Commission nationale de l'informatique et des libertés, published recommendations for application programming interface data sharing. The guidance states data holders must ensure the security of any data shared using API, while eliminating risks associated with sharing sensitive data.Full story
With the draft automated decision-making regulations out for consumption, the California Privacy Protection Agency is allowing stakeholders the opportunity to explore and understand the proposed rules ahead of a formal rulemaking process. IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, parsed through the 17-page proposal for a deeper look into what may catch AI governance and privacy professionals' eyes.Full story
The California Privacy Protection Agency released draft rules on automated decision-making technologies, outlining how businesses using these systems must provide notice, opt-out options and access requirements to consumers. IAPP Staff Writer Caitlin Andrews breaks down the proposed rules and the CPPA Board's likely topics of discussion for its 8 Dec. meeting.
The Council of the European Union adopted the Data Act 27 Nov. Among several objectives, the act aims to promote fairness when allocating value from the use of data by actors in the digital economy and ease difficulties when switching between data processing providers.
The U.K. government announced amendments to the proposed Data Protection and Digital Information Bill (No. 2) that reflect a "raft of common-sense changes." U.K. Secretary of State for Science, Innovation and Technology Michelle Donelan said the amendments address "cracking down on cookies, scrapping pointless paperwork which stifles productivity, tackling benefit fraud (and) making it easier to protect our citizens from criminals." The U.K.
The Spanish Presidency of the Council of the European Union circulated half of the Artificial Intelligence Act provisions governing law enforcement's use of AI models within the Committee of Permanent Representatives 24 Nov., Euractiv reports. The remaining half, which focuses on issues such as use of foundation models, access to source code, system governance, and the sanction regime, is anticipated to be addressed by the committee 1 Dec.
The Office of the Australian Information Commissioner announced Carly Kind as privacy commissioner. Kind's appointment to the OAIC is a stand-alone position created under a new three-commissioner format, which includes separate commissioners for information, privacy and freedom of information. Kind's term begins 26 Feb. 2024.Full story
An unsealed complaint filed by 33 U.S. state attorneys general shows the depth of alleged children's privacy violations against Meta, The New York Times reports.
Spain's data protection authority, the Agencia Española de Protección de Datos, published guidance on the use of biometric data for work and personal purposes, noting employers must follow the EU General Data Protection Regulation regardless of employee consent.
Uruguay's Regulatory and Control Unit of Personal Data issued a resolution recognizing data protection adequacy to facilitate data transfers with South Korea and organizations participating in the EU-U.S. Data Privacy Framework.