Spain's data protection authority, the Agencia Española de Protección de Datos, announced Worldcoin will not resume its data collection in Spain until the company settles its investigation with the Bavarian State Office for Data Protection Supervision. The AEPD previously decided Worldcoin could not process citizens' biometric data under the AEPD's Tools for Humanity Corporation framework.Full story
Norway's data protection authority, Datatilsynet, offered its opinion and observations regarding Meta's proposed AI model training protocol and the utilization of users' social media posts. The Datatilsynet provided information for how users can opt out of the service while noting it is currently investigating the legality the training data practices. Full story
In an op-ed for The Wall Street Journal, Digital Progress Institute President Joel Thayer said app stores should use an age verification system to protect children from accessing harmful social media content.
Privacy-enhancing technologies are becoming a key to advancing privacy practices associated with personalized advertising, AdExchanger reports. Apple Machine Learning Researcher Ryan Rogers said with PETs and a privacy-enhanced data analytics layer tool, companies "can still get useful insights from data without revealing anything at the individual level."Full story
The U.S. National Institute of Standards and Technology will hold a workshop 25 June to discuss updates to the Privacy Framework version 1.1 and the joint Frameworks Data Governance and Management Profile. The update of the NIST Privacy Framework is intended to better align it with the Cybersecurity Framework 2.0. Stakeholder input will go toward public drafts of both updates.Full story
The European Data Protection Supervisor released guidance on privacy considerations by EU institutions around the development and use of generative artificial intelligence.
The Court of Justice of the European Union published an advocate general opinion regarding a case from the Supreme Administrative Court of Bulgaria seeking to clarify data subject erasure provisions under the EU General Data Protection Regulation.
The California Privacy Protection Agency will hold an information session 26 June for stakeholders to discuss the data broker accessible deletion mechanism. The tool allows state residents to make a single request through the CPPA to data brokers to delete their personal information that is not exempted under the California Consumer Privacy Act. The agency is taking public comment until 25 June regarding requirements associated with the mechanism.Full story
The U.S. Department of Health and Human Services' Office for Civil Rights revised its frequently asked questions resource for the Change Healthcare data breach. The updated FAQ is intended to answer questions "concerning who is responsible for performing breach notification to HHS, affected individuals, and where applicable the media."Full story
Data protection authorities from Denmark, the Faroe Islands, Finland, Iceland, Norway, Sweden and Åland signed a declaration to advance a variety of privacy goals at the annual Nordic meeting. The DPAs agreed to principles to protect children's privacy, implementation plans for the EU Artificial Intelligence Act and increased enforcement actions.Full story