The California Privacy Protection Agency Board unanimously adopted regulations to clarify data broker registration and transparency requirements under the Delete Act. The new rules come as the CPPA's enforcement division is ramping up work on data broker registration noncompliance, including two new settlements covering unregistered brokers. IAPP Staff Writer Lexie White reports on the broker rules and their expected impact.Full story
Euronews reports the European Commission indicated it will continue its standardization work with the U.S., while some policy efforts could be on hold, after President-elect Donald Trump takes office in January 2025. The European AI Office and the U.S. AI Safety Institute are also expected to continue to "work towards the development of a common framework for evaluating generative AI models."Full story
The U.S. Consumer Financial Protection Bureau released a report examining holes or ambiguity in financial data protection under enacted U.S. comprehensive state privacy laws. The report calls attention to insufficient protections for data or exemptions for financial institutions among most laws.
The European Commission is seeking stakeholder comments on the AI Act's definition of AI systems and provisions around prohibited practices. The questionnaire seeks "explanations and concrete cases" to help support "practical usefulness" in subsequent guidance stemming from stakeholder views. The consultation deadline is 11 Dec.Full story
Canada's Office of the Privacy Commissioner launched an investigation into the World Anti-Doping Agency's use of athletes' biometric data. The OPC said it wanted to ensure sensitive biometric data is protected and the agency is compliant with Personal Information Protection and Electronic Documents Act obligations.Full story
Chief information security officers are using personal indemnity insurance to navigate rising security and data breach risks, Infosecurity Magazine reports. Panaseer CEO Jonathan Gill said some CISOs are facing potential enforcement actions from company boards and enforcers, "but they lack the data to provide accurate insights that would help hold the business accountable."Full story
The Washington Post reports U.S. President-elect Donald Trump is expected to try to prevent the potential U.S. ban of social platform TikTok if it does not divest from Chinese parent company ByteDance. Political consultant and former Trump administration Senior Counselor Kellyanne Conway said, "there are many ways to hold China to account outside alienating 180 million U.S. users each month."Full story
The U.S. Department of Justice charged two men with allegedly breaking into AT&T's systems and stealing around 50 billion customer calls and text records, TechCrunch reports. The DOJ's indictment alleges hackers also made ransom attempts against individuals impacted by the breach, threatening to leak the stolen information.Full story
Reuters reports the European Commission called on Apple to stop allegedly using geo-blocking on some of its app services and threatened enforcement measures if it did not comply. Geo-blocking refers to restricting content based on a user's location, which requires geolocation tracking.Full story
The Hamburg Commissioner for Data Protection and Freedom of Information wrote about two data deletion cases handled by the Federal Court of Justice and the European Court of Justice. The agency reiterated how to go about requesting data deletion and noted the right to privacy does not always apply if the information in question relates to the public interest.Full story