ABC News reports on the potential for certain small and medium-sized businesses to be regulated under Australia's Privacy Act reform. Proposed amendments laid out by Australia Attorney-General Mark Dreyfus eliminate the SME exemption for businesses making AUD3 million or less annually, requiring them to take on compliance measures and costs.
U.S. lawmakers working to pass federal privacy legislation should heed lessons learned from the EU’s experience after the General Data Protection Regulation was passed, Brookings Institute Center for Technology Innovation Governance Studies Nonresident Senior Fellow Mark MacCarthy writes. MacCarthy called for "a modified version of the European approach of requiring a lawful basis for data processing" but the law does not need to copy the exact wording of the EU GDPR.
Privacy should be the next evolution of companies' environmental, social and corporate governance, InfoSum CEO Brian Lesser writes in The Drum.
The Spanish autonomous region of Catalonia’s data protection authority, the Autoritat Catalana de Proteccio de Dades, published a guide for developers titled "Privacy by design and privacy by default." The guide is intended "to enable developers, and controllers who commission them to develop applications, to identify the different important elements for personal data protection, and the steps that can be taken to deal with it right from the moment of design."
The U.S. military is developing lethal drones implanted with facial recognition technology, Newsweek reports after a contract between the Department of Defense and a Seattle-based software company was first obtained by NewScientist Magazine.
The 118th U.S. Congress doesn't intend to let 2022 momentum on a comprehensive federal privacy law slip by the wayside. That much was clear during a dedicated privacy hearing hosted by the House Committee on Energy and Commerce's Subcommittee on Innovation, Data and Commerce. Lawmakers sought to reaffirm positive work on and prior full committee passage of the proposed American Data Privacy and Protection Act while framing the urgent circumstances that require legislation now more than ever.
Hong Kong’s Office of the Privacy Commissioner for Personal Data issued a reminder that the standard contractual clauses for transfers of personal data published by the Cyberspace Administration of China enters into force June 1. "It is advisable that early steps be taken by the relevant enterprises or organisations to understand the provisions of the measures and assess its impacts on their cross-border transfers of personal information," Privacy Commissioner for Personal Data Ada Chung said.
Following its investigation into the use of Google Analytics, Norway's data protection authority, Datatilsynet, issued a preliminary conclusion finding the tool breaches the EU General Data Protection Regulation's data transfer rules.