The European Data Protection Board published its binding decision in the Irish Data Protection Commission's case against WhatsApp over violations of the EU General Data Protection Regulation concerning transparency and user consent.
The California Privacy Protection Agency Board will hold a public meeting Feb. 3 with potential action on draft California Privacy Rights Act regulations on the agenda. Finalization of CPRA regulations at the meeting follows the timeline outlined by CPPA Executive Director Ashkan Soltani at the board's Dec. 16, 2022, meeting. Action by the board would trigger a 30-day review from the California Office of Administrative Law and open a potential April release date for final regulations.
In an interview with Bloomberg Law, U.S. Federal Trade Commission Division of Consumer Protection Director Samuel Levine said the commission will continue tightly regulating dark patterns used by commercial surveillance companies. He highlighted fines issued to cellular provider Vonage Holdings and Epic Games as indications the commission is stepping up enforcement.
For World Data Protection Day, the U.K. Information Commissioner’s Office is encouraging small- and medium-sized businesses to review their data security practices. The ICO offered suggestions for new businesses, such as listing the types of personal data they collect, being transparent about data collection with customers and having a breach action plan in place.
The IAPP Privacy Around the Globe LinkedIn Live series moves to the U.K. Feb. 2 for a closer look at its evolving privacy regime. IAPP Research and Insights Director Joe Jones, formerly the deputy director for international data transfers at the U.K. Department for Digital, Culture, Media and Sport, will sit down with IAPP Vice President and Chief Knowledge Officer Caitlin Fennessy, CIPP, for a breakdown of U.K. General Data Protection Regulation reform, international data flows and recent activity by the U.K.
Indian Minister for Railways, Communications, Electronics and Information Technology Ashwini Vaishnaw said the proposed Digital Personal Data Protection law will balance innovation with the protection of individuals’ rights, Business Standard reports. However, he said striking that balance will be difficult at times. “The world has been following the General Data Protection Regulation approach to the right to privacy and protection of personal data. It is robust across multiple economies over many years.
The U.S. Transportation Security Administration is investigating how a hacker stole an old version of the agency’s no-fly list, CNN reports. The stolen data was reportedly stored on an unsecured server owned by Ohio-based airline CommuteAir. A 23-year-old cyber security researcher in Switzerland with the username Tillie Kottmann claimed responsibility for the hack and notified the airline, which said the data was outdated. An individual by the same name was indicted by the U.S.
European Commissioner for the Internal Market Thierry Breton told TikTok CEO Shou Zi Chew the platform faces a Sept. 1 ban in the EU if it does not address Digital Services Act compliance, Reuters reports.
Nextgov reports the U.S. National Institute of Standards and Technology has begun considering revisions to its Cybersecurity Framework 2.0. The agency published a concept paper outlining the first proposed updates since 2018, including modernized cybersecurity best practices, sector-specific requirements and cybersecurity governance.