Innovation, Science and Economic Development Canada is seeking stakeholder feedback on how it should implement certifications for trusted data flows under the Global Cross-Border Privacy Rules Forum. The ISED explained the certifications would make it easier to conduct cross-border data transfers for businesses by streamlining the regulatory process.
Axios reports the U.S. Senate Committee on Commerce, Science and Transportation advanced Federal Trade Commissioner nominee Mark Meador and Office of Science and Technology Policy Director nominee Michael Kratsios to full Senate confirmation votes.
The California Privacy Protection Agency announced a USD632,500 settlement with American Honda Motor over alleged California Consumer Privacy Act violations. The settlement resolves claims around various aspects of Honda's privacy practices, including insufficient necessity and proportionality considerations for data collection, and sharing consumer data without contracts containing sufficient privacy terms.
Indiana University's Center for Applied Cybersecurity Research Executive Director Scott Shackelford writes about a gradual shift toward workers having more privacy in the workplace thanks to U.S. state-level laws. "Across the board, employers need to ensure appropriate notice and consent, and pay attention to the cybersecurity of wearable tech that is permitted in the workplace," he said.Full story
The European Parliament approved an agreement to allow secure passenger name record data, including individuals' travel and contact information, to be shared between the EU and Canada.
Luxembourg's National Commission for Data Protection issued a reminder about the importance of user consent when used as a legal basis for processing under the EU General Data Protection Regulation. The CNPD's updated information specifies "under what conditions consent can be considered valid" under the GDPR.Full story
The European Commission released the third draft of the general-purpose AI Code of Practice with 16 additional safety and security commitments related to AI models with systemic risks. The final draft is expected to be ready in May after the working group receives another round of feedback.Full story
Two recent legal reforms in Mexico may have a significant impact on the country's data protection enforcement regime, Basham, Ringe y Correa, S.C.'s Data Protection and IT Associate Renata Denisse Bueron Valenzuela and Data Protection Associate Ivan Garcia Argueta write.
The Network Advertising Initiative announced the launch of its Self-Regulatory Framework, which is intended to serve as a model for digital advertisers to self-regulate and comply with U.S. state and federal privacy regulations.
California Attorney General Rob Bonta issued California Consumer Privacy Act compliance letters concerning geolocation data sales. Bonta said the letters, sent to covered entities across various industries, requested additional information related to recipients' business activities while notifying them of a potential CCPA violation.Full story