The Philippines' National Privacy Commission offered updates regarding recent data beach notifications it is investigating, including two from Robinsons Land and Toyota along with six from the Philippine National Police. It reminded companies and those who process data they must notify affected subjects within 72 hours of the breach being discovered.Full story
The Hamburg Commissioner for Data Protection and Freedom of Information published a position paper on the current employment data protection landscape and how it fits into overall data protection regulations. The paper reflects on recent court decisions around employee data in Germany, with a focus on protections for people seeking jobs.Full story
LinkedIn removed its targeted advertising tool to comply with the EU Digital Services Act provisions prohibiting companies from using sensitive personal data for advertising purposes, Reuters reports.
The Organisation for Economic Co-operation and Development released a working paper exploring how competition and data privacy interact. Two committees on those subjects will meet this month to discuss the enforcement interventions and regulatory measures that could chart a path for cooperation between regulators on the two spaces.Full story
Insurance companies are allegedly collecting driving information from smartphone apps that have safety features, The New York Times reports. Smartphone apps, including Life360 and GasBuddy, allegedly collect and share driving data with insurance companies unless users opt out of the feature. Full story
The IAPP presented U.S. Office of the National Cyber Director General Counsel Jim Halpert with a Commendation for Exemplary Service to the Field of Privacy.
Under the term "covered data" in the proposed American Privacy Rights Act, there contains a subset of 18 categories of "sensitive covered data" that would require "affirmative express consent” before being transferred to a third party. IAPP Westin Research Fellows Andrew Folks, CIPP/E, CIPP/US, CIPM, and Luke Fischer break down the sensitive categories, which include include government identifiers, genetic information and personal financial information.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he dissects where privacy fits in to the "dark patterns" equation through the lens of a U.S. federal court case involving Amazon Prime.Full story
The current version of the proposed American Privacy Rights Act could leave small businesses in a bind. The App Association President Morgan Reed opines having the APRA cover small businesses rather than exempting them is more sensible with a carveout likely denying "the benefits of preemption" and "leaving them open to opportunistic lawsuits" through the proposed private right of action.Full story
Texas Attorney General Ken Paxton launched an investigation into multiple vehicle manufacturers following published media reports that their vehicles collect data on drivers and sell it to third parties.