The European Data Protection Board met 20 June. Items discussed included offering recommendations on the application for approval of "elements and principles" of the controller binding corporate rules and seeking a request for a mandate on the interplay of the EU Artificial Intelligence Act and EU data protection laws.Full story
Twenty-four nongovernment organizations wrote the European Commission urging consideration of maintaining appropriate consumer redress as the commission works on legislation to harmonize EU General Data Protection Regulation enforcement, Euractiv reports. The European Commission is expected to publish a proposal in July that would help expedite administrative procedures for GDPR enforcement.
U.S. Sens. Elizabeth Warren, D-Mass., and Peter Welch. D-Vt., sent a letter to Amazon President and CEO Andy Jassy about patient data protection for those enrolled in Amazon Clinic. The basis of the inquiry was for Amazon to respond to the claim patients "are asked to provide Amazon with expansive access to their health information," per a press release.
Bermuda government officials and the Office of the Privacy Commissioner for Bermuda set an official date for when the Personal Information Protection Act will go into effect. All remaining provisions will go into effect 1 Jan. 2025. PrivCom will now provide organizations with an 18-month "phased action plan" to comply fully with the law. Full story
Belgium's Federal Public Service Mobility and Transport and the Netherlands' vehicle authority allege Transport for London's debt collection agency unlawfully obtained citizens' information to issue fines, the Guardian reports. The Dutch authority said European Parking Collection requested individuals' names and addresses through an Italian government agency that was not authorized to disclose the data.
Ten years ago, a then-unknown U.S. government contractor leaked top secret U.S. government surveillance programs to major media outlets. Within days, Edward Snowden became a household, if not, controversial name. The leaks rippled throughout the world and led to changes in U.S. law and put the trans-Atlantic data transfer relationship on shaky ground.
The U.S. Department of Health and Human Services' Office for Civil Rights announced a USD240,000 settlement with Washington-based Yakima Valley Memorial Hospital over alleged Health Insurance Portability and Accountability Act violations. The OCR claimed security guards at the hospital accessed medical records of 419 patients.
Mobile data broker Kochava filed with a U.S. federal court to block an amended privacy complaint from the U.S. Federal Trade Commission from becoming public.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPM, CIPP/US, breaks down a recently declassified report from the U.S. Office of the Director of National Intelligence examining how intelligence agencies acquire "commercially available information" during investigations.