Paul Weiss Partner John Carlin produced an infographic featuring 10 steps for organizations to mount a response to a ransomware attack. Key protocols include isolating infected systems, securing backups and activating the internal response team.Full story
Google outlined concepts of its proposed children's online safety legislation that "shares responsibility between app stores and developers." The company argued current U.S. state-level child online safety bills, like Utah's App Store Accountability Act, create additional risks by requiring app stores to collect age data.
In a U.K. Information Commissioner's Office LinkedIn post, Executive Director of Regulatory Risk Stephen Almond discussed how a total ban on organizations using generative AI would not be effective. Almond indicated a starting point for organizations is to proactively evaluate AI tools employees may need and tailor use that "complies with data protection obligations and meets business needs." Meanwhile, the U.K.
Iceland's data protection authority, the Personuvernd, will focus on personal data processing standards for advertising, health care and e-commerce organizations in 2025. The DPA also plans to hold discussions with stakeholders to promote innovation while protecting individuals' personal information.Full story
The U.S. Federal Trade Commission will continue its antitrust investigation into Microsoft that was originally opened under former FTC Chair Lina Khan, Bloomberg reports. In the FTC's original civil investigative demand request to Microsoft, the agency sought data regarding the company's AI operations, such as the cost to train models and obtain training data, as well as information about its data centers.
The Supreme Court of Korea dismissed Meta's appeal of a KRW6.7 billion fine by South Korea's Personal Information Protection Commission over alleged privacy violations. The PIPC's action stemmed from 2020 claims Meta provided users' personal information to third parties without consent.
Organizations using AI assisted lawyers must ensure the technology follows ethical and legal privacy compliance standards to boost transparency and accountability. Finance and Privacy Attorney David Arrick, CIPP/US, writes AI should be used as a tool, "not a licensed attorney, so supervise it like an overeager intern. Check its work, question its sources, and never assume it knows what it's talking about."Full story
The U.S. Cybersecurity and Infrastructure Security Agency is working to navigate international relationships and continuing to protect U.S. digital security while the agency faces layoffs, Wired reports.
U.K. Minister of State for Data Protection and Telecoms Chris Bryant told attendees at the IAPP Data Protection Intensive: UK 2025 the proposed U.K. data reforms contained in the Data Use and Access Bill could pass by late April. Bryant expressed optimism regarding the bill, which still has steps to go in U.K. Parliament, while also discussing EU-U.K. adequacy and the future of AI enforcement. IAPP Editorial Director Jedidiah Bracy reports from London.Full story
Spain's Ministry for Digital Transformation and Public Service will draft a law codifying the provisions of the EU AI Act into domestic law. The bill, which will cover prohibited AI practices and high-risk AI development, will enter several procedures before returning to the Council of Ministers to approve it as a draft law. After ministerial approval, the bill would move to Spanish Parliament for approval.Full story