France's data protection authority, the Commission nationale de l'informatique et des libertés, offered advice on how users can request their data be deleted from 23andMe and discussed concerns about the company's bankruptcy status.Full story
South Korea's Personal Information Protection Commission issued a KRW13.451 billion fine to financial services company Woori Card after the company allegedly violated the Personal Information Protection Act by using affiliate store owners' personal information for marketing purposes without consent.
The Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Administration for Market Regulation announced plans for 2025 probes into various data collection practices. The agencies will look into collection practices concerning mobile apps, software development kits, public facial recognition technology and smart terminals.Full story
TransUnion published its 2025 State of Omnichannel Fraud Report, which identifies a shift in identity thieves' strategies to focus on "high-success, short-term payoffs" schemes, according to its executive summary. The report found a 34% increase in U.S. data breach severity from 2023 to 2024, but a 45% decrease in breach volume.
Taiwan's Executive Yuan approved the draft Organization Act of the Personal Data Protection Commission as well as draft amendments to the Personal Data Protection Act. The Organization Act outlines 11 measures clarifying the organizational structure of the PDPC.
The Czech Republic's data protection authority, Úřad pro ochranu osobních údajů, met with Austria's Data Protection Authority to discuss enforcement efforts and personal data protection with the development of AI technology. Austria's DPA Commissioner Matthias Schmidl said the "increase in personal data processing requires effective cross-border cooperation.
As part of its 25th anniversary, the IAPP will celebrate 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week, we highlight the evolution and proliferation of data breaches from the early 2000s to today.Full story
A U.S. House Committee on Energy and Commerce subcommittee hearing 26 March seesawed between discussions on the path forward for children's online safety bills and the recent removal of Democratic Federal Trade Commissioners. IAPP News Editor Joe Duball reports on the lawmakers' dialogue and comments from former Federal Trade Commissioner Rebecca Kelly Slaughter, who was called to testify before the subcommittee.Full story
Organizations looking to train AI technology must ensure the data it uses is fully anonymized and meets data protection obligations. UKG's Roy Kamp, AIGP, CIPP/E, CIPP/US, CIPM, FIP, and Noémie Weinbaum, AIGP, CIPP/E, CIPP/US, CIPM, CDPO/FR, FIP, wrote the "future of AI governance may depend on finding a middle ground — one that acknowledges the limitations of traditional anonymization while upholding strong ethical safeguards." Full story
The Office of the Privacy Commissioner of Canada released a data breach self-assessment tool to help organizations better respond to data breaches.