Texas Attorney General Ken Paxton notified more than 100 companies regarding their lack of registration as data brokers under the state's Data Broker Law. Companies that buy, sell and trade data needed to register by 1 March or face a penalty.
The European Data Protection Board ruled in favor of Meta's appeal of daily fines imposed by Norway's data protection authority, Datatilsynet, for ongoing use of behavioral advertising.
The U.S. Federal Trade Commission referred its children's privacy probe into TikTok data practices to the Department of Justice, Politico reports. The FTC investigation centered around alleged Children's Online Privacy Protection Act Rule violations that breached a 2019 consent order reached by TikTok's predecessor, Musical.ly.
Finland's Office of the Data Protection Ombudsman updated its guidance on how organizations should manage data protection officers. It includes explicit reminders on supporting DPOs in their duties, proper resourcing and how officers "may not be fired or punished for handling data protection tasks."Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, opened a 30-day comment period on its children and adolescents' data processing regulatory project. The ANPD encouraged feedback to focus on issues such as the best interests of the minors, consent from parents and guardians, and the transparency of processing operations.Full story
Denmark's data protection authority, Datatilsynet, released guidance on EU General Data Protection Regulation compliance for small associations to ensure personal data is collected, stored and deleted properly.
South Korea's Personal Information Protection Commission published guidance for personal information processors to ensure the use of data protection safeguards. The guidance details encryption and security methods for personal information collected and stored by processors.
The U.K. Information Commissioner's Office announced the conclusion of its investigation into Snap's "My AI" chatbot and closure of the enforcement notice. Following the ICO issuing a preliminary notice for possible U.K. General Data Protection Regulation violations in October 2023, Snap released a revised data protection impact assessment, which met the requirements of Article 35 of the U.K. GDPR.
The European Data Protection Board announced Croatia's Data Protection Agency Director Zdravko Vukić was elected as deputy chair.
Messaging service Signal's President Meredith Whittaker said the company would rather "cease operations" than comply with anti-encryption laws and social media surveillance tools allegedly used by law enforcement, the Guardian reports. Whittaker said the company "will fight until the end to ensure that as many people across the globe have access to meaningful privacy."Full story