Standardization landscape for privacy: Part 3 — W3C and IEEE
As privacy concerns become top-of-mind for web developers and systems engineers around the world, privacy standardization efforts become more important.
As privacy concerns become top-of-mind for web developers and systems engineers around the world, privacy standardization efforts become more important.
The Australia Institute's Centre for Responsible Technology said proposed privacy law reform is "the first significant upgrade of privacy laws in four decades," the Guardian reports.
The U.S. Department of Health and Human Services’ Office for Civil Rights called on health care providers to bring telehealth practices into compliance with the Health Insurance Portability and Accountability Act and the Health Information Technology for Economic and Clinical Health Act. Telehealth data security rules are being reinstated with the COVID-19 public health emergency declaration set to expire 11 May.
Technology industry interest group NetChoice called on Gov. Sarah Huckabee Sanders, R-Ark., to veto the Social Media Safety Act, which would prohibit minors under age 18 from accessing platforms without parental consent, MediaPost reports.
Johns Hopkins Hospital is training a machine-learning algorithm that studies changes to patients' faces to identify signs of stroke, seizures or migraine headaches, The Wall Street Journal reports.
The newfound popularity of ChatGPT, the OpenAI chatbot powered by generative artificial intelligence, "poses complex privacy risks to individuals, organizations and society," writes IAPP Principal Researcher, Technology, Katherina Koerner, CIPP/US. She noted these AI chatbots rely on large data sets that can contain information scraped from the web.
MediaPost reports the California Chamber of Commerce filed a petition to the Superior Court of California, County of Sacramento, for a delay on enforcement of California Privacy Rights Act regulations. The chamber said the California Privacy Protection Agency's "piecemeal approach and disregard of statutory deadlines" hasn't given businesses sufficient time to prepare for the regulations, which were finalized 30 March after initially being slated for finalization 1 July 2022.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, published a Q&A outlining proper procedures for data protection impact assessments. The 15-question document covers basic inquiries the covered entities have regarding process, preparation and requirements for performing DPIAs.
In this week's Global News Roundup, the U.K. Information Commissioner's Office fined TikTok for breaches of the U.K. General Data Protection Regulation. The European Data Protection Board issued updated guidelines on personal data breach notification under the EU GDPR. And the first review of the EU-Japan adequacy agreement was finalized. (IAPP member exclusive.) Full Story