Gov. Kim Reynolds, R-Iowa, signed Senate File 262 on consumer privacy into law. Reynolds touted the bill as giving consumers "a reasonable level of transparency and control over their personal data." The law will take effect 1 Jan. 2025. IAPP Westin Research Fellow Anokhy Desai, CIPP/US, CIPT, analyzed the bill from top to bottom and provided key takeaways for privacy professionals.Full Story
The U.K. Department for Science, Innovation and Technology published a white paper with its approach to regulating artificial intelligence technologies. The regulatory framework seeks to "build public trust in cutting-edge technologies and make it easier for businesses to innovate, grow and create jobs." The approach consists of five AI principles: safety, transparency, fairness, accountability and governance, and redress. U.K.
Members of India's Parliament on the Parliamentary Standing Committee on Information Technology proposed 40 amendments to the draft Digital Data Protection Bill. The proposed changes relate to concerns over perceived centralization of power, insufficient independence for the proposed Data Protection Board and government exemptions.
France's data protection authority, the Commission nationale de l'informatique et des libertés, fined rental scooter company Cityscoot 125,000 euros for collecting and maintaining a record of vehicles' geolocation data.
The Atlantic reports that while artificial intelligence chatbots are built using data available online, there is "an uncomfortable disparity between who does the work that enables these AI models to function and who gets to control and profit from them." Chatbots are created "by ingesting books and content that have been published on the internet by a huge number of people.
Spain’s data protection authority, the Agencia Española de Protección de Datos, published guidance to help public administrations manage risks around data exchanges.
The state of Arkansas brought lawsuits 28 March against social media companies TikTok and Meta, alleging the companies deceived consumers about children’s safety on their platforms, ABC News reports. In total, two lawsuits were brought against TikTok and its parent company, ByteDance, and another against Meta for alleged violations of the state’s deceptive trade practices act.
Both chambers of the French legislature approved draft legislation to temporarily utilize "intelligent surveillance systems" during the 2024 Paris Olympics and Paralympics, The Associated Press reports. The systems "combine cameras with artificial intelligence software to flag potential security concerns." A human operator would then evaluate if a flagged security concern necessitates action.
The U.K. Regulatory Policy Committee, a government oversight entity, published its opinion on the proposed Data Protection and Digital Information Bill. The RPC's "fit for purpose" opinion examined the impact assessment conducted on the latest draft of the bill, including its amendments for the scientific research exemption, legitimate interest-based processing and use of existing data transfer mechanisms.
In an interview with the Australian Financial Review, Australian Information Commissioner Angelene Falk discussed her office's hopes for pending Privacy Act reforms. Falk called current data handling practices "very complex and difficult to understand," creating the need for improved guardrails that "ensure all personal information handling is fair and reasonable." She added that requiring private and public entities to perform risk assessments and consider privacy before collecting data must become the standard rather than relying on user consent.