Following a 5.5 million euro fine by Ireland's Data Protection Commission in January, WhatsApp switched its legal basis for processing personal data under the EU General Data Protection Regulation, Euractiv reports. The DPC found WhatsApp's prior "contract" legal basis insufficient and ordered the app to find a new one.
California Attorney General Rob Bonta issued letters to large-sized employers throughout the state inquiring about their respective levels of compliance with the California Consumer Privacy Act. Bonta's letters specifically address businesses' compliance with protections governing the handling of employee and job applicants' personal information.
The U.S. Federal Trade Commission finalized a USD7.8 million order against BetterHelp over alleged improper data sharing for advertising purposes. The order prohibits the online counseling service from sharing consumers' health data for advertising and sharing personal data for retargeting.
The European Commission opened a call for evidence on the performance of the European Union Agency for Cybersecurity and the effectiveness and efficiency of the European Cybersecurity Certification Framework. The feedback period is open through 16 Sept.
Thailand's Office of the Personal Data Protection Commission announced a public hearing to formalize the responsibilities of data controllers and processors under the Personal Data Protection Act. The public hearing is open until 26 July. Full story
United Nations High Commissioner for Human Rights Volker Türk said facial recognition could create "mass surveillance of our public spaces, destroying any concept of privacy," Biometric Update reports.
While comprehensive federal privacy legislation lags in the U.S., Congress should consider better funding the Federal Trade Commission so it can continue with its recent work of fighting Big Tech companies' violations of their own privacy notices, Atlantic Council Cyber Statecraft Initiative Fellow Justin Sherman writes in Slate.
A recent spate of ransomware attacks targeting file transfer software MOVEit has underscored the significant uptick in reported data breaches in 2023, GovInfoSecurity reports. The Clop ransomware group's attack of MOVEit has already affected upward of 320 businesses, schools and public entities, which have mostly been discovered within the last two weeks.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, looks at a report released by six U.S. senators and a representative on privacy practices of the tax preparation industry. Zweifel-Keegan said the report's conclusion that tax preparation companies shared taxpayers' data with Big Tech companies underscores an important point for privacy professionals.Full story
The European Data Protection Supervisor found the Court of Justice of the European Union's use of Cisco Webex videoconferencing services meets EU data protection standards.