The IAPP announced Mark Thompson, CIPP/E, CIPM, CIPT, FIP, as its Chief Strategy Officer. Thompson was director of the IAPP Research and Insights team prior to the new appointment. In his new role, Thompson will develop strategy and provide executive oversight of operations for the IAPP globally.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced a public consultation on the draft resolution for regulations outlining the regulator's sanctioning powers. The ANPD said the regulations aim to "promote the effectiveness of the (General Data Protection Law) through the establishment of a methodology" for its sanctions that "provide legal certainty for both (the) regulated and regulators." The public comment deadline is Sept.
Developing content for children has become big business for entertainment platforms, Marketing Brew reports. However, when children watch programs on streaming services, companies are required to limit collection of their data and restrict behavioral and targeted advertising, per the U.S. Children’s Online Privacy Protection Act.
Hackers breached cloud communications company Twilio, Vice reports. The company provides infrastructure to companies that send automated text messages to users, so the hackers had an opportunity to take over users’ accounts that were tied to their phone number on a service backed by Twilio. One such service was encrypted messaging application Signal. Signal announced approximately 1,900 users were targeted by the hackers.
The Hill reports TikTok wrote to U.S.
Scotland is nearing approval of the world’s first statutory Code of Practice for use of biometric information, Holyrood reports. The regulation would govern police and the criminal justice system’s “acquisition, retention, use and destruction of biometric data.” Scotland’s Criminal Justice Committee has signed off on the regulation, which could be finalized by mid-November if national ministers do not object to any of its provisions in their meeting Sept.
Two cases before the Illinois Supreme Court could serve as precedent for determining insurance companies’ exposure when their clients violate the state Biometric Information Privacy Act, Insurance Newsnet reports. The first case, Cothron v. White Castle System, Inc., would determine if BIPA violations occur on a “per-scan” basis each time an individual submits to a biometric scan. The other case, The Tims v.
The U.S. Federal Trade Commission's privacy and data security rulemaking proposal could prove to be a lofty undertaking despite some advanced planning. IAPP Westin Emeritus Fellow and Goodwin Procter Partner Omer Tene said the broad nature of the agency's recently issued Advance Notice of Proposed Rulemaking brings part risk and opportunity.
The European Data Protection Board issued a binding decision under the EU General Data Protection Regulation's Article 65 dispute resolution mechanism related to a 600,000 euro fine handed down by France's data protection authority, the Commission nationale de l’informatique et des libertes. The Article 65 procedure was triggered by concerned supervisory authorities' issues with the proposed sum of the CNIL fine.