Attorney general launches Colorado Privacy Act enforcement
Colorado Attorney General Phil Weiser notified businesses that the Colorado Department of Law will begin enforcing the Colorado Privacy Act, which went into effect 1 July.
Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.
CNIL outlines Google Privacy Sandbox considerations
France's data protection authority, the Commission nationale de l'informatique et des libertés, published recommendations and considerations for Google's Privacy Sandbox. The CNIL detailed the basic purpose and use cases for the sandbox, which the regulator said will be available to all parties in Q3 2023 as third-party cookies are deprecated.
UK Betting and Gaming Council completes ICO sandbox
The U.K. Information Commissioner's Office published the exit report detailing the Betting and Gaming Council's utilization of the agency's regulatory sandbox.
2023 on pace for highest total breaches; hackers allegedly steal US, European government emails
- The second quarter of 2023 saw 951 reported data breaches in the U.S., InfoSecurity Magazine reports, citing data compiled by the nonprofit Identity Theft Resource Center. The number of breaches represented a 114% quarterly increase. So far, there have been 1,393 data breaches in 2023, which is on pace to exceed the highest number of recorded breaches since the ITRC began tracking data compromises in 2005.
How the EU-US Data Privacy Framework looks in practice
U.S. Department of Commerce Data Privacy Framework Director Alex Greenstein will join IAPP Vice President and Chief Knowledge Officer Caitlin Fennessy, CIPP, on LinkedIn Live Friday to discuss the EU-U.S. Data Privacy Framework in practice. Greenstein will share insights and answer questions on the newly approved framework.
SADAI conducting surveys on data transfers, PDPL implementation
The Saudi Arabia Authority for Data and Artificial Intelligence opened a survey for the country's transportation and communications sector in the context of its Regulation on the Transfer of Personal Data Outside the Geographical Borders of the Kingdom. The survey ends 31 July, and "aims to clarify the detailed provisions and procedures related to the transfer of personal data outside" the country.
ICO offers compliance takeaways from Q1 2023 enforcement
The U.K. Information Commissioner's Office published data protection compliance lessons businesses can learn from through the office's Q1 2023 enforcement work. The ICO lamented the importance of fully developed privacy notices, employee training for data handling, timely responses to data subject requests, and a focus on privacy by design and by default.Full story
Draft of India's DPDPB would lower consent authorization to age 14
The Indian government could be empowered to lower age restrictions regarding authorizing consent online to 14, according to a draft version of the proposed Digital Personal Data Protection Bill reviewed by The Economic Times of India.
AEPD issues new cookie guidance based on EDPB directives
Spain's data protection authority, the Agencia Española de Protección de Datos, updated its guide on the use of cookies to reflect the latest directives issued by the European Data Protection Board. The guidance addresses the use of deceptive patterns by various advertising technology companies.Full story
Italy's DPA asks adult entertainment platform to clarify user profiling, tracking
Italy's data protection authority, the Garante, gave MG Freesites, the company that manages adult entertainment platform Pornhub, 20 days to clarify its user profiling and tracking systems. It also asked the company to indicate its legal basis for data processing, the type of data collected, methods for obtaining consent, whether data is sent to third parties, and any measures taken to verify the age of users.