Articles from Around the Web

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

Privacy review: How to develop an internal data analytics program

While companies are embracing embedding privacy principles into their product development processes, Meta Product Privacy Program Manager Rahul Chidugulla, CIPM, opines a "critical blind spot often remains in safeguarding user data within their internal systems." He offers recommendations for conducting privacy reviews as part of internal data analytics reviews, such as building infrastructure to understand when user data is queried and implementing access controls.Full story

CPPA seeks public comment on proposed DROP regulations

The California Privacy Protection Agency opened a public comment period on its proposed Delete Request and Opt-out Platform regulations. The draft DROP regulations are part of the rulemaking process for the state's Delete Act. The regulations are a tool allowing state residents to delete their personal information stored by CPPA-registered data brokers with a single request.

ANPD completes DPO compliance sweep

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced a successful review of 20 companies' level of compliance with data protection officer requirements under the General Personal Data Protection Law. The inspection, which began in November 2024, primarily focused on controllers frequently cited in data subjects' requests due to the lack of a dedicated DPO.

NCSC releases report on protecting sensitive data with cryptography

The U.K. National Cyber Security Centre released a report on cryptography techniques that can help organizations comply with data protection obligations. The report detailed advanced cryptography techniques, including Fully Homomorphic Encryption and Multiparty Computation, which can be used "to tackle problems that can't be solved simply by encrypting, decrypting, signing, and verifying information."Full story

US law enforcement explores expanded surveillance through connected vehicle features

Connected vehicle subscription features, such as cameras that collect collision information, could allow law enforcement agencies to use consumer data for government surveillance, Wired reports. Vehicle subscription features collect sensitive user information, including geolocation and phone data, that may be provided by automakers to law enforcement agencies for investigations.Full story

Inside the US government's data collection practices

The U.S. government has collected vast amounts of information about U.S. citizens, raising concerns over how sensitive data could be used, The Atlantic reports. White House spokesperson Harrison Fields said the U.S. Department of Government Efficiency is combining citizens' data from various government agencies to "identify fraud and prevent criminals from exploiting hardworking American taxpayers."Full story

Biometrics in the EU: Navigating the GDPR, AI Act

The EU AI Act further builds on the protections of biometric data under the EU General Data Protection Regulation, Fieldfisher Senior Associate Richard Lawne, CIPP/E, CIPP/US, CIPM, writes. Lawne outlines how the AI Act classifies the use of four types of biometrics by risk, ranging from prohibited high risk and limited risk, as well as providing recommendations for navigating the overlap between the two regulations. Full story

Don't Miss a Compliance Update.

Sign up for expert compliance insights, new law analysis,

and free resources to keep your business protected.