Evolve Bank and Trust announced it experienced a cyberattack that compromised the sensitive personal data of consumers including the information of finance company Affirm's cardholders, Reuters reports.
Privacy Commissioner of Canada Philippe Dufresne spoke to the Alberta Legislative Assembly's Standing Committee on Resource Stewardship about its review of the province's Personal Information Protection Act. Dufresne also spoke on Bill C-27, the Digital Charter Implementation Act, and how the federal omnibus could be improved to protect privacy while supporting innovation and working with the PIPA.
The Oslo District Court ordered Grindr to pay a 5.65 million euro fine related to alleged improper data collection practices. The ruling affirmed prior decisions from Norway's Data Protection Authority, Datatilsynet, and the Norwegian Privacy Appeals Board regarding EU General Data Protection Regulation claims over the collection and sale of sensitive user data.Full story
Norway's data protection authority, Datatilsynet, said it would need clarification on the regulation of children's online communications before supporting proposed revisions of the Child Protection Act.
The U.S. Department of Health and Human Services' Office of Civil Rights announced it fined Heritage Valley Health System USD950,000 related to alleged Health Insurance Portability and Accountability Act violations that led to a ransomware attack.
The European Commission notified Meta of alleged Digital Markets Act violations related to the platform's pay or consent subscription model for targeted advertising.
France's data protection authority, the Commission nationale de l'informatique et des libertés, conducted its fourth data protection officer survey aimed at understanding the employment and skill concerns involved in compliance with the EU General Data Protection Regulation. One notable finding from the survey of 3,625 DPOs included the presence of more DPOs at smaller entities, but they work with fewer resources.Full story
Comprehensive privacy laws in Oregon and Texas took force 1 July. The attorney general in both states has exclusive enforcement powers under each law. Oregon's Department of Justice has a resource hub dedicated to the Oregon Consumer Privacy Act while Texas' attorney general offered a page outlining the Texas Data Security and Privacy Act.
South Korea's Personal Information Protection Commission announced a plan to pseudonymize domestic hospitals' medical data so it can be used in research. The plan was developed after a sandbox test of a joint research data platform 28 June.Full story
Lithuania's State Data Protection Inspectorate issued guidance on how employers should process criminal record data. The guidelines are meant to help ensure the rights and freedoms of employees are protected while understanding the legality of processing the information.Full story