FTC explores social media fraud
The U.S. Federal Trade Commission "Data Spotlight" series covered the growing issue of fraud via social media.
The U.S. Federal Trade Commission "Data Spotlight" series covered the growing issue of fraud via social media.
New Zealand Privacy Commissioner Michael Webster said facial recognition may not be a "justified and proportionate response" to limit repeat offenses of retail crime, RNZ reports.
Genetic data belonging to approximately 1 million users of genetic testing service 23andMe surfaced on the dark web, NBC News reports. The data included first and last names, gender, and individual ancestry evaluation details. The information posted specifically targeted individuals with Ashkenazi Jewish ancestry.
Italy's data protection authority, the Garante, released recommendations on how schools can protect the privacy of students, staff and families. The guidelines cover topics including how photos taken on school trips should be managed, regulatory updates and how to protect privacy while using education technology.Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, released a browser app to assess the security of online encryption systems. The tool is meant to give guidance on what encryption standards to look for while processing personal data and does not transmit any information back to the authority.Full story
The California Privacy Protection Agency's initial draft California Privacy Rights Act regulations for cybersecurity audits and risk assessments are available for public consumption despite no commencement of the formal rulemaking process to this point. IAPP Westin Research Fellow Andrew Folks, CIPP/US, provides an overview of the procedural steps in the forthcoming rulemaking that warrant the most attention and the CPPA's expected timelines for arriving at finalized rules.Full story
The U.K. Information Commissioner's Office issued a preliminary enforcement notice against Snap that could require the technology company to stop processing data connected with its artificial intelligence chatbot, "My AI." The ICO said, "This means not offering the 'My AI' product to UK users pending Snap carrying out an adequate risk assessment." A provisional ICO investigation found a risk assessment conducted prior to My AI's launch did not "adequately assess" its data protection risks, particularly to children.
Germany's Federal Cartel Office, the Bundeskartellamt, ruled Alphabet must give Google users the ability to decide how their personal data is used across its various services. The ruling aims to limit how much data Google can collect by requiring the company to get explicit consent before using the information.
When it comes to digital ambitions, IAPP Managing Director, Europe, Isabelle Roccia says "Spain is getting stuff done." Roccia describes the number of Spanish-led initiatives across digital policy in recent months as "staggering" and highlights recent discussion on "data spaces" at a conference hosted by Spain's data protection authority, the Agencia Española de Protección de Datos, and the EU Agency for Cybersecurity.Full story
Features designed to improve privacy and protect children in online services, apps and networked devices can also make it easier for abusers to maintain control in abusive relationships, BasisTech Chief Scientist Simson Garfinkel, CIPP/US, writes. Garfinkel said privacy professionals should be aware. "Privacy pros need to be familiar with special tactics used by abusers and work with design teams to build defenses into products and services," he said.Full story