Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, found TikTok potentially violated the General Data Protection Law by processing minors' personal data irregularly in a 2021 case. As the ANPD opens formal proceedings, TikTok has 10 days to cease allowing minors to access the platform without registering and 20 days to institute better age verification mechanisms.Full story
Bird & Bird Partner Ruth Boardman, Associate Emma Drake, CIPP/E, and Associate Laura Goold updated a previous IAPP resource focusing on the U.K.'s data protection reform efforts. The update accounts for the recent introduction of the draft Data Use and Access Bill, which contains minor changes from the previously considered Data Protection and Digital Information Bill.Full story
The European Commission and South Korea's Personal Information Protection Commission recently held discussions regarding "a comprehensive area of free and safe personal data flows" between jurisdictions based on equivalent data protection regulations.
In an op-ed for Euractiv, Fédération Internationale de l'Automobile European Bureau Policy Director Diogo Pinto said, with an increase in connected cars and their technological abilities, privacy protections must be implemented to protect drivers' data.
The New York Times Technology Reporter Kashmir Hill analyzed AI's decision-making abilities by using various AI platforms to make everyday decisions like creating text messages, choosing outfits and making grocery lists. Hill said, while the technology could be useful to save time and find quick solutions to problems, it lacked authenticity.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, discussed how people can protect themselves if their data is compromised in a leak or a breach. It detailed several instances that may require different responses, including fraudulent banking, identity theft, phishing and SIM card fraud.Full story
Czech Member of European Parliament Markéta Gregorová said ensuring consistent cross-border EU General Data Protection Regulation enforcement is a top goal as trilogue negotiations for a proposed harmonization regulation commence.
When deploying AI systems, organizations and individuals responsible for protecting personal and sensitive data must be accountable for ensuring safeguards are in place. FTI Consulting Senior Managing Directors Nina Bryant and Meredith Brown discuss AI accountability principles for privacy teams in the contexts of who may be impacted, organizational risks and ethics. Full story
Latvia's Data State Inspectorate published guidance on the common mistakes made when implementing third-party cookies on a website. It focused particularly on incorrect creation of cookie banners, which the regulator characterized as "the most essential and most easily noticeable discrepancy" among banners.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and AI governance developments in the nation's capital and around the U.S. This week, he checks in on various developments and impacts around pervasive geolocation tracking allegations cropping up around the U.S.Full story