The U.K. Department for Science, Innovation and Technology announced updates to the app store and developer code of practice. Originally released December 2022, the updated code emphasizes previously established principles for "minimum security and privacy requirements," including transparency, data security measures and breach notification practices.
The European Data Protection Board and the European Data Protection Supervisor issued a joint opinion on a proposal to create a digital euro.
In an op-ed for Fast Company, Quantum Xchange Chief Marketing and Communications Officer April Burghardt wrote businesses need to start thinking critically about cryptographic security as quantum computing becomes more advanced. "Considering the quantum era is fast approaching, there's no escaping the need to replace legacy encryption," she said.Full story
A Sailpoint survey of 1,500 IT leaders found only one-third of organizations are prepared for when the EU's updated Network and Information Security Directive takes effect October 2024, Infosecurity Magazine reports. The law encompasses companies within the energy, transport, banking and health care sectors. The survey found 80% of respondents need to secure their supply chains under the law's requirements.Full story
The Spanish Presidency of the Council of the European Union circulated three discussion papers for the proposed EU Artificial Intelligence Act's trilogue negotiations that address fundamental rights, sustainability obligations and workplace decision-making, Euractiv reports. Members of European Parliament are pushing for required fundamental rights impact assessments for high-risk AI models.
With the EU-U.S. Data Privacy Framework now in place, there are several advantages for companies to join the agreement, Baker McKenzie's Brian Hengesbaugh and Elizabeth Denham write. Hengesbaugh and Denham said the primary advantage to enrolling in the EU-U.S. DPF is the ability for U.S. companies to legally receive transfers of personal data from the EU for storage and processing purposes.Full story
Google released a legislative framework offering policymakers principles to craft better laws to protect children online. Many of the principles are grounded in embedding age-appropriate design features that are "designed with safety in mind" to deliver a better online experience for minors.
Bloomberg Law reports on the increased attention being paid to potential privacy issues stemming from tracking pixels. Litigation in U.S. federal courts regarding the embedded website tracking tools is growing while the U.S. Federal Trade Commission is simultaneously bringing a broad crackdown against online tracking.
U.S. federal agencies are behind in their adoption of 2018 privacy recommendations from the U.S. National Institute of Standards and Technology, CyberScoop reports. The NIST previously advised agencies on integrating its risk management framework and accompanying privacy tools into their own operations management practices.
The European Data Protection Board announced its 2024 coordinated enforcement action will be on controllers' implementation of the right of access under the EU General Data Protection Regulation. Further details will materialize in upcoming plenary sessions, but the enforcement will be "bundled and analysed, generating deeper insight into the topic and allowing for targeted follow-up on both the national and the EU level."Full story