Various children's data protection laws and draft bills around the world qualify users under 18 as a child. Higher age requirements may result in website operators concluding their site could be directed at children, Baker McKenzie's Elizabeth Denham, Lothar Determann and Jonathan Tam, CIPP/C, CIPP/US, write.
LinkedIn Vice President and Chief Privacy Officer Kalinda Raina, CIPP/US, gathered several privacy professionals to co-author "Children's Privacy and Safety," which explores areas of modern children's privacy and safety issues. The book intends to help practitioners and advocates grasp the landscape for children's data protection law, educational privacy, gaming and safety issues, and more.
Join the IAPP 31 Aug. for a discussion with representatives from the U.K. Digital Regulation Cooperation Forum regarding upcoming U.K. regulatory initiatives and priorities on a range of digital matters, including artificial intelligence policy. The DRCF includes the U.K. Competition and Markets Authority, the Information Commissioner's Office, the Office of Communications, and the Financial Conduct Authority. Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, opened a public consultation on critical processing computer systems. The CNIL aims to "group together all the advanced security practices that it recommends to be implemented" in a single document for high-risk data processing operations in instances that could pose serious privacy risks for affected persons, state security or society at large.
Amazon and Starbucks are asking a federal court judge to dismiss a lawsuit claiming the "Just Walk Out" cashless checkout violated New York City law, MediaPost reports. Plaintiffs claim the technology's biometric data collection violates a city ordinance requiring "clear and conspicuous" notice, while Amazon argues they consented to the tech's use.
U.S. Rep. Nancy Mace, R-S.C., chair of the House Oversight Committee's Cybersecurity, Information Technology, and Government Innovation Committee, proposed the Federal Cybersecurity Vulnerability Reduction Act, The Record reports. The proposed legislation would require federal contractors to enact policies consistent with National Institute of Standards and Technology guidelines.
The Irish Times reports the High Court of Ireland dismissed allegations concerning the handling of an investigation into Google's real-time bidding system by Ireland's Data Protection Commission.
In an op-ed for Infosecurity Magazine, SolarWinds Chief Information Security Officer and Vice President of Security Tim Brown recapped a recent panel his company hosted on "key ways to help the industry become secure by design." The panel concerning private and public-sector cybersecurity touched on the need for collaboration to ensure safe information sharing, proper training and "supporting victims in responsible disclosure."Full story
EU Digital Services Act regulations governing the obligations of "very large online platforms" and "very large online search engines" are in effect as of 25 Aug., Euractiv reports. Platforms and search engines with more than 45 million active EU users, must now submit risk assessments to the European Commission. The full DSA for smaller websites goes into effect in early 2024.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy developments in the nation's capital and around the U.S., including a look at the international warning from various data protection authorities to social media platforms regarding data scraping and means to prevent it.Full story
A view from Brussels: Readying for DSA as obligations take effect