Wireless carrier T-Mobile announced a second data breach this year, Bleeping Computer reports. Unlike an earlier breach disclosed in January, the most recent breach was limited in scope and only impacted 836 customers. However, the information stolen "varied for each of the affected customers" and included personally identifiable information, as well as account PIN numbers and Social Security numbers.
A new chart in the IAPP Resource Center offers a look at the EU regulatory decision-making process and how laws get approved. The chart describes the main steps of the codecision procedure, the most common decision-making procedure among EU institutions and includes an illustrative timeline of the EU General Data Protection Regulation process. Full Story
The number of lawsuits alleging violations of Illinois' Biometric Information Protection Act increased 65% following a precedent-setting February ruling by the Supreme Court of Illinois, Bloomberg reports. A total of 122 cases have been filed since the court's White Castle decision, while 74 lawsuits were filed in the two months prior.
Apple and Google entered a partnership to create a "proposed industry specification" to fight unwanted Bluetooth location device tracking, according to a joint press release.
The Information Accountability Foundation wrote a blog outlining the unique requirements for data protection assessments under the Colorado Privacy Act. When Colorado regulations take force in July, covered entities must conduct assessments with first-of-their-kind obligations, according to IAF's analysis of assessment provisions in other domestic or global jurisdictions.
Australia Attorney-General Mark Dreyfus announced the federal government will allocate resources to restructure the Office of the Australian Information Commissioner, the Guardian reports. The OAIC will move to a three-commissioner format, including a commissioner dedicated to handling data breach matters.
Amazon Clinic requires patients to waive federal medical privacy protections under the U.S. Health Insurance Portability and Accountability Act as a condition for enrollment, according to an analysis conducted by The Washington Post.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, launched a public consultation on guidelines for reporting data breaches. The guidance includes sections on reporting criteria, the reporting and investigation processes, and data breach notification requirements.