The U.S. Cybersecurity and Infrastructure Security Agency published a fact sheet outlining the agency's Information Technology Sector-Specific Goals. The fact sheet contains both software development process goals, including separating all design environments during development, and product design goals, such as increasing the use of multifactor authentication. Full story
The New Jersey Division of Consumer Affairs published an FAQ document for businesses subject to the state's comprehensive data privacy law. The document features definitions for key terms, information on various business requirements and enforcement details. The law takes effect 15 Jan.Full story
Meta Oversight Board co-Chair Helle Thorning-Schmidt said she is concerned about the effect the company's removal of third-party fact-checkers could have on users, BBC News reports. Thorning-Schmidt said the move could allow users to post harmful content, including hate speech, that could "lead to real-life harm."Full story
Join IAPP Research and Insights Director Joe Jones for a LinkedIn Live 9 Jan. focusing on the draft rules for India's Digital Personal Data Protection Act. Trilegal Partner Rahul Matthan and Persistent Systems Senior Vice President and General Manager for Digital Governance Shivangi Nadkarni will join Jones to share insights for how organizations can potentially address DPDPA compliance efforts as the draft rules head for finalization.
A U.S. class-action lawsuit filed against Google's alleged nonconsensual collection of consumer data after users opted out of tracking will face a federal jury, Bloomberg Law reports. Google previously claimed its policies state that enabling privacy controls does not stop the company from collecting basic consumer data.Full story
Motorola license plate recognition systems used to share information with law enforcement could be exposing sensitive vehicle data in real time due to a security flaw within its systems, Wired reports.
404 Media reports hackers allegedly accessed troves of customer data from geolocation data broker Gravy Analytics and are threatening to publicly leak the data. The breach comes after the U.S. Federal Trade Commission recently took action against Gravy Analytics and its subsidiary Venntel for illegal data collection and selling.
The U.S. Consumer Financial Protection Bureau sued credit reporting company Experian in the U.S. District Court for the Central District of California for allegedly not investigating disputes or removing errors on credit reports.
NextGov reports a U.S. program was developed to help consumers know when some Internet of Things products meet government-backed cybersecurity standards. The Cyber Trust Mark will be displayed on the item to show it meets testing benchmarks by the U.S. National Institute of Standards and Technology and Federal Communications Commission later this year.
On 3 Jan., India's Ministry of Electronics and Information Technology officially released draft rules for the Digital Personal Data Protection Act. Following the current public consultation and finalization, the Indian government plans to give businesses approximately two years to implement the rules. IAPP Staff Writer Alex LaCasse reports on stakeholder reaction to the draft rules, their potential impact and the importance of the transition period.Full story