The U.S. Department of Homeland Security released a guide for government officials looking to use generative AI to improve the delivery of services. The guidance includes a breakdown of steps DHS took to develop its own AI applications, including seeking user feedback and hiring and training technical talent.Full story
Euractiv reports The Court of Justice of the European Union issued a preliminary decision regarding the frequency of EU General Data Protection Regulation complaints and their consideration by data protection authorities. The court indicated DPAs are not permitted to dismiss GDPR claims based on perceived excessiveness and must review each claim appropriately.
The U.S. Consumer Financial Protection Bureau recognized the Financial Data Exchange as a standard-setting body under the agency's financial data rights rule. It will allow FDX to set standards for companies to follow in order to comply with the rule, which requires data providers to make covered data for financial products available to customers in digital form.Full story
Hong Kong's Office of the Privacy Commissioner for Personal Data updated its guidelines for using cloud computing to improve data protection. The guidelines now include updated recommendations for "service and deployment models, standard services and contracts as well as outsourcing arrangements." Meanwhile, the PCPD published its findings in a data breach investigation of the Urban Renewal Authority.Full story
Apple clarified its Siri data processing practices after agreeing to a USD95 million settlement over related user claims, Reuters reports. Apple said it has never sold data collected by Siri and "does not retain audio recordings of Siri interactions unless users explicitly opt in to help improve Siri, and even then, the recordings are used solely for that purpose."Full story
The New York Times reports on what to watch for in the U.S. Supreme Court's 10 Jan. hearing over the TikTok divestment law and the platform's potential ban in the U.S. If TikTok is banned 19 Jan., U.S.
Technology law firm ZwillGen announced the acquisition of boutique AI law firm Luminos.Law, bringing a unique approach to AI governance under the roof of the traditional digital compliance practice. IAPP Staff Writer Caitlin Andrews talks to both firms' cofounders about the merge and what the future of AI compliance may look like.Full story
The European General Court ordered the European Commission to pay nonmaterial damages to an individual over an unlawful EU-U.S. data transfer, marking new precedent regarding EU collective actions related to data protection claims. The Commission could appeal the case to the Court of Justice of the European Union.
The U.K. government will propose criminal penalties for individuals who generate nonconsensual sexually explicit deepfake content, as well as for those who install equipment to capture intimate nonconsensual images. Perpetrators would face up to two years in prison under the proposed offenses, which will be included within the Crime and Policing Bill that has yet to be introduced in Parliament.Full story
Carnegie Mellon University announced its new Privacy Technology and Policy part-time master's degree program. CMU Privacy Engineering Program co-Director Norman Sadeh said the program is intended to "accommodate the needs of professionals who want to remain in their careers while gaining advanced expertise in privacy technology and policy."Full story