Allowing corporate exemptions for undefined "trade secrets" under the EU Data Act “would disable the regulation and revoke all of the benefits that it would provide,” Finland's Minister of Transport and Communications Timo Harakka writes in the Financial Times. He said businesses cloud the definitions of health records and sensitive personal data with business data, which they argue should be exempt from sharing under the law.
New York Attorney General Letitia James announced the state entered a $410,000 settlement with the owner of 16 software companies selling products “that allowed individuals to monitor another person’s device without their awareness.” Patrick Hinchy owned multiple software companies that reportedly sold “stalkerware,” which allowed a user to spy on an intimate partner or spouse without their consent.
Italy's data protection authority, the Garante, banned U.S.-based artificial intelligence chatbot company Replika from processing the personal data of Italian users.
European Commissioner for the Internal Market Thierry Breton said upcoming proposed artificial intelligence regulations will address concerns around AI systems like ChatGPT, Reuters reports. "AI solutions can offer great opportunities for businesses and citizens, but can also pose risks," he said.
With advancements in technology like OpenAI's ChatGPT, Microsoft Vice Chair and President Brad Smith said 2023 will likely "mark a critical inflection point for artificial intelligence." He said, "The opportunities for people are huge. And the responsibilities for those of us who develop this technology are bigger still.
In this week’s Global News Roundup, the European Commission launched a new General Data Protection Regulation enforcement review plan. The U.S. Department of Health and Human Services’ Office for Civil Rights entered a settlement with a health care provider for a patient privacy rights violation. And British Columbia has new rules for its Freedom of Information and Protection of Privacy Act. (IAPP member exclusive.)Full Story
The California Privacy Protection Agency adopted its first set of proposed final California Privacy Rights Act regulations. The final rules proposal will be sent to the California Office of Administrative Law, which has 30 business days to review and approve. The CPPA's final rulemaking package includes the regulations and a statement of reasons from the agency to explain its work. According to the CPPA's FAQ, the regulations could take effect in April at the earliest.
The European Union and Singapore announced an agreement on a new digital partnership, which includes improving cooperation on “cutting-edge technologies” like artificial intelligence and ensuring cross border data transfers comply with data protection rules.
U.S. President Joe Biden plans to call for tougher regulations of the technology industry and stronger privacy protections in his State of the Union address, The Washington Post reports. Common Sense Media CEO and founder Jim Steyer said the address is a potential "watershed moment" and an opportunity for Biden to highlight "a bold agenda that protects America's kids, families and consumers from the downsides of Big Tech."Full Story
The Nigeria Data Protection Bureau announced it revoked the operating licenses of 19 data protection compliance organizations. The NDPB authorizes DPCOs “to provide compliance services and guide their clients whether in the public or private sectors to adhere to privacy guidelines.” However, the NDPB found “many DPCOs have not demonstrated the requisite professionalism and capacity to carry through with these tasks despite their face-value qualification.”Full Story