IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, looks at the latest privacy developments in the nation's capital, and dives into the practice of web scraping. While common, and often harmless, web scraping can at the same time lead to an array of supposed harms, Zweifel-Keegan said, including invading individual privacy.Full Story
A look at the latest from the EDPB
The popularity of artificial intelligence chatbots, such as ChatGPT, has led to new Android malware and phishing campaigns, according to research from cybersecurity firm Cyble. Researchers found phishing websites containing malware are spread via a spoofed social media page for ChatGPT maker OpenAI. Other phishing sites posed as payment portals for users to pay for ChatGPT services in order to steal their credit card information.
Spain’s data protection authority, the Agencia Española de Protección de Datos, published guidance for anonymizing data. The guidance called for a trained professional to handle the anonymization of a personal data set who also has experience in reidentification attacks.
Gov. Gavin Newsom, D-Calif., issued a statement supporting the California Age-Appropriate Design Code Act. The statement came in response to technology trade association NetChoice filing a lawsuit against the state in an attempt to block the online safety law.
Australian Attorney-General Mark Dreyfus said the government was committed to reforming the Mandatory Data Retention Regime.
South Africa’s Information Regulator referred the National Department of Health to the Enforcement Committee due to handling of certain COVID-19 health data during the pandemic. The Information Regulator previously sought assurances from the NDoH that it deidentified and deleted contact-tracing data in a database containing citizens personally identifiable information.
The Office of the Privacy Commissioner of Canada and provincial privacy authorities announced an investigation into TikTok's data practices. Regulators in Alberta, British Columbia and Québec will join the OPC in a review of "whether the organization’s practices are in compliance with Canadian privacy legislation" in relation to user consent and transparency obligations.
The European Data Protection Board issued three enforcement actions against Meta in January, each of which arose as binding decisions from the one-stop-shop dispute resolution mechanism. Following the decisions, IAPP Research and Insights Director Joe Jones offered an in-depth legal analysis of the practical takeaways concerning legal bases and transparency.
Air Canada is launching a voluntary facial recognition option for passengers flying through Vancouver International Airport and visiting its lounge at Toronto's Pearson International Airport, Global News reports. Travelers will upload a facial image and scan of their passport to the Air Canada application where it will be stored for up to 36 hours after a flight departs.