The U.S. Cyber Safety Review Board is planning to investigate the hack of major telecommunications companies that resulted in the theft of data belonging to prominent U.S. government officials, The Wall Street Journal reports.
In a report to the U.S. Department of Health and Human Services, Change Healthcare claimed the cyberattack it experienced in February breached the data of 100 million Americans, CyberScoop reports. The new figure sets the incident as largest breach to ever be reported to U.S. regulators.
U.K. Information Commissioner John Edwards issued a "stark warning" for companies handling personal data to "do better" to prevent data breaches. Citing ICO research, Edwards explained 55% of U.K. adults have had personal data lost or stolen, 30% of whom reported emotional distress after the fact.
The Massachusetts Supreme Judicial Court ruled hospitals do not violate the state's wiretap law by sharing website data with third parties, MediaPost reports.
The European Data Protection Board published supplemental guidance on how and when to apply legitimate interest as a legal basis for processing under the EU General Data Protection Regulation's legitimate interest principle. The guide offers three core questions a data processor must answer affirmatively for the legitimate interest principle to qualify.
Denmark's data protection authority, Datatilsynet, released the findings from its inquiry into primary schools' data processing standards.
Bloomberg Law reports genetic privacy lawsuits in Illinois have increased since 2023, with 30 proposed class-action cases filed under the state's Genetic Information Privacy Act during that time.
Norway Prime Minister Jonas Gahr Støre said children should be 15 years old or over before they can consent to their personal data being handled by social media companies. The government is working on legislation to create an absolute age limit for social media but plans to submit a consultation note on raising the consent age in the Personal Data Act from age 13 to 15 in the interim.Full story
Morrison Foerster Senior Counsel Lokke Moerel and Of Counsel Marijn Storm explored the implications of the Hamburg Commissioner for Data Protection and Freedom of Information's stance on large language models as a personal data storage conduit.
The proposed reform to the Australian Privacy Act will affect many aspects of consumer privacy and data security that organizations must prepare to comply with.