Meta plans to roll out an alternative targeted advertising model for EU Facebook and Instagram users that does not require payment for fewer personalized ads. The original pay-or-consent proposal remains intact at a lower cost, but Meta is adding a free opt-in model characterized as serving "less personalized ads." IAPP News Editor Joe Duball reports on Meta's new direction and its broader data protection impacts.Full story
The IAPP released its IAPP Privacy Governance Report 2024, building on previous comprehensive efforts to shine a light on the location, performance and significance of privacy governance within organizations. Research focused on governance and organizational structures, privacy strategy and planning, compensation and budget management, and performance metrics and monitoring.
IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes for Euractiv about the challenges of weaving in all of the EU's various digital policy rules and how streamlining governance could help groups navigate them. "An unintended effect of the EU approach is feeding an overwhelming sense of disorientation as organisations face exponential regulatory complexity when operating in the digital world," she wrote.
The Hamburg Commissioner for Data Protection and Freedom of Information fined a debt collection service provider 900,000 euros for retaining personal data for up to five years without a legal basis. The problem was discovered as part of an audit from the Hamburg Federal Debt Collection Agency. The company admitted to the violation and cooperated with the authority, according to the agency. Full story
Canada Minister of Innovation, Science and Industry François-Philippe Champagne announced the launch of the country's Artificial Intelligence Safety Institute 12 Nov.
Germany's Federal Office for Information Security published an AI survey that allows organizations to submit information and concerns related to AI security. The survey aims to understand how companies are interacting with AI technology and ensure organizations are enlisting the proper tools to navigate potential risks associated with AI. Companies have until 15 Nov. to submit the survey.Full story
Denmark's data protection authority, Datatilsynet, said the National Police responded to its inquiry about the agency's use of facial recognition technology.
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, investigated the Education Executive Agency's use of algorithms and found the system could be discriminatory toward certain students. The agency allegedly used students' personal information to determine which students were more likely to abuse its nonresident student grant.
While there is no shortage of multilateral platforms dedicated to comprehending cross-border digital regulation, the U.N.'s Global Digital Compact may provide the most comprehensive initiative yet. IAPP Research and Insights Director Joe Jones and Analyst Cheryl Saniuk-Heinig, CIPP/E, CIPP/US, outline the GDC's origins and perceived goals aimed at "establishing a collective governance framework spanning the different digital law and policy domains."Full story
The California Privacy Protection Agency's 8 Nov. board meeting brought several crucial developments for the future of the agency's enforcement strategy. The board approved a formal rulemaking on a package of draft regulations, including those on automated decision-making technology, and adopted data broker regulations to help clarify Delete Act requirements. Meanwhile, CPPA Executive Director Ashkan Soltani announced his resignation, effective January 2025.