The Center for Democracy and Technology published research on the impacts nonconsensual AI deepfakes are having on U.S. public school students. The CDT found 39% of students said they have heard about individuals at their school becoming victims of nonconsensual intimate imagery.
The Office of the Australian Information Commissioner announced it completed its investigation into 7-Eleven Stores' use of facial recognition after it previously found the company's use of the technology interfered with individuals' privacy.
The EU AI Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
The Court of Justice of the European Union issued a ruling stating data protection authorities are not obligated to render a fine or order corrective action following a data breach if the controller has taken remedial actions.
The European Commission announced that more than 100 companies signed a voluntary pledge to begin applying principles of the EU AI Act prior to its entry into application. Signatories range across size and industry.
The U.S. Federal Trade Commission announced its Operation AI Comply initiative will bring enforcement actions against five companies for alleged deceptive and harmful AI use.
South Korea's Personal Information Protection Commission issued a KRW1.14 billion fine to Worldcoin and its affiliates for alleged violations of the Personal Information Protection Act. The PIPC claimed Worldcoin collected biometric data from users in exchange for digital assets without a legal basis, and transferred the data to third countries in violation of the PIPA.
The Office of the Privacy Commissioner of New Zealand urged businesses to consider swift data breach notification practices. Commissioner Michael Webster addressed the need after a health care group allegedly ignored its reporting requirements for privacy breaches several times. He said talking to the office even if all the details of a possible breach are not known helps solve the problem quicker.Full story
Norway's data protection authority, Datatilsynet, discussed its part in the country's newly released digital strategy. The plan, which runs through 2030, emphasizes building privacy into the public sector's information technology framework and continuing to protect citizens' data from Big Tech companies.Full story
Reuters reports the U.S. District Court for the Southern District of New York struck down a law requiring food delivery services to provide customer data to the restaurants they order from. A group of delivery companies argued the law intruded on customers' privacy rights and threatened their business prospects.Full story