The Oregon Department of Justice released a toolkit for people to understand their rights under the Oregon Consumer Privacy Act, which entered into force 1 July 2024. The information includes details on where people can find a business' data collection practices and use of information, and how to file a complaint if a request to delete data is not followed.Full story
Poland plans to bolster its cybersecurity efforts to reduce cyber threats ahead of its May presidential election, Bloomberg reports. Deputy Prime Minister Krzysztof Gawkowski said officials will also work to strengthen "social media analysis and teach government officials about the tools the state has to ensure the integrity of the election."Full story
The IAPP Research and Insights team updated its Global Privacy Law and Data Protection Authority Directory for 2025. Legal Research Associate Aly Apacible-Bernardo, CIPM, and Westin Research Fellow Kayla Bushey detailed the updates, which highlight new and amended comprehensive data protection laws as well as recently established DPAs.Full story
Forty trade associations sent a letter to members of Congress calling on lawmakers to introduce and pass comprehensive federal privacy legislation.
U.K. Information Commissioner's Office Group Manager for AI Policy Sophia Ignatidou discussed growing data protection myths surrounding AI use. Ignatidou said common misconceptions include a perceived lack of user control over personal data being used to train AI, developers' allegedly shielding how they use personal data and how AI models do not carry data protection risks.Full story
To celebrate Data Privacy Week, the U.S. National Institute of Standards and Technology published all of its resources in a new online hub. Additionally, NIST listed several new initiatives, such as its Privacy Threat Modeling Tool and a forthcoming NIST Privacy Workforce Taxonomy.
The Chinese-developed generative AI platform DeepSeek's privacy notice states, "We store the information we collect in secure servers located in the People's Republic of China," Wired reports. Additionally, the company collects user information shared with the platform, information it "automatically collects" and users' personal information obtained from other sources. Meanwhile, DeepSeek's platform endured a cyberattack 27 Jan.
France's data protection authority, the Commission nationale de l'informatique et des libertés, reflected on the high volume of large databases breached in 2024. The 5,629 breaches reported to the CNIL represented a more than 20% increase from 2023, while the number of breaches affecting more than 1 million people doubled.
U.S. Privacy and Civil Liberties Oversight Board spokesman Alan Silverleib announced 27 Jan. the Trump administration terminated the services of the Democratic board members, effective 23 Jan.
Sweden's data protection authority, the Integritetsskyddsmyndigheten, Director General Eric Leijonram called for a review of the EU General Data Protection Regulation in an op-ed with Dagens Nyheter.