U.S. Office of Personnel Management director nominee Scott Kupor told Senate Democrats during a nomination hearing he would protect federal employees' data from unauthorized intrusions, FedScoop reports. Some senators cited the Department of Government Efficiency's access to sensitive health and taxpayer information at various agencies and using it in the White House's cost-cutting efforts.Full story
With AI reshaping the digital advertising space, Ambart Law Associate Maria Cannon, AIGP, writes it is "entirely possible that advertising campaigns will be created to target a human user's AI agent," rather than a natural person themselves. Cannon outlines considerations for integrating AI into advertising campaigns, improved understanding of risks around generative AI tools and potential hallucinatory outputs.Full story
The Guardian reports child online safety advocates are urging the U.K. government to avoid reviewing its enforcement of the Online Safety Act as part of a potential tax cut trade deal with the U.S. The law requires technology companies to shield minors from potentially harmful content, something U.S. officials have decried as infringing on free speech rights.Full story
As part of its 25th anniversary, the IAPP will celebrate 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week, we highlight Harriet Pearson, CIPP/US, and her work to establish foundational principles for the chief privacy officer role.Full story
The EU-U.S. Data Privacy Framework is facing multiple and very diverse threats across judicial, political, geopolitical and trade avenues, writes IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E. This week's development came from Luxembourg as the European General Court held a hearing in a case challenging the DPF filed by a Member of French Parliament.
Politico reports the European Commission plans to introduce a proposal to reform the EU General Data Protection Regulation in the "coming weeks," according to European Commissioner for Democracy, Justice, the Rule of Law and Consumer Protection Michael McGrath. The reform, part of a broader simplification of EU digital rules, is expected to focus on easing the GDPR's reporting requirements for small and medium-sized businesses.
Ireland's Data Protection Commission is anticipated to issue a 500 million euro EU General Data Protection Regulation fine to TikTok's parent company, ByteDance, for allegedly transferring personal data to China, Bloomberg reports.
A Writer survey of executives and employees found there's widespread optimism about the direction of their AI adoption plan but there are concerns regarding uptake in the workplace. IAPP Staff Writer Caitlin Andrews unpacks the survey results from 1,600 respondents and what they say about how AI governance is being handled.Full story
Poland's data protection authority, the Urząd Ochrony Danych Osobowych, issued guidance to help data controllers understand when a data protection impact assessment should be conducted. The UODO lists 12 types of processing operations and examples of what constitutes high-risk activity that could violate an individual's rights.Full story
Lithuania's State Data Protection Inspectorate recommends online stores conduct regular audits of privileged access rights, create a destruction process, use encryption to protect data and more as part of a review of online store data practices. The review was carried out as part of the agency's planned 2024 monitoring activities.Full story