The U.K. Department for Science Innovation and Technology published draft legislation to modernize the country's U.K. General Data Protection Regulation and general data use standards. The proposed Data Use and Access Bill represents the Labour government's answer to the previously introduced Data Protection and Digital Information Bill that U.K. Parliament failed to pass prior to the national elections in July.
A Microsoft report on the effect ransomware attacks have on health care providers found an increase in cyberattacks targeting hospitals, Cyberscoop reports.
IAPP Privacy Law and Policy Principal Researcher Müge Fazlioglu, CIPP/E, CIPP/US, updated the previously published compliance matrix detailing requirements for AI systems and models as well as providers' individual responsibilities under the EU AI Act.Full story
The EU AI Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
Ireland's Data Protection Commission fined LinkedIn 310 million euros for allegedly conducting behavioral analysis and targeted advertising in violation of the EU General Data Protection Regulation. The alleged violations involved nonconsensual data processing and insufficient adherence to legitimate interest as a legal basis for processing.Full story
The Privacy Survey 2024 by Norway's data protection authority, Datatilsynet, found 36% of online users did not understand what information companies were asking to collect within websites' consent agreements.
The White House is expected to sign a national security memorandum 24 Oct. on how U.S. defense agencies can use AI systems, The New York Times reports. The action is the most recent one by President Joe Biden as the government wrestles with how to manage AI without major regulation in place.
Privacy rights group NOYB filed a complaint to France's data protection authority, the Commission nationale de l'informatique et des libertés, claiming Pinterest's advertisement tracking standards violate the EU General Data Protection Regulation, TechCrunch reports.
The Baden-Württemberg Commissioner for Data Protection and Freedom of Information released an FAQ about deceptive design patterns. It touches on several topics including what obstruction and overloading can look like as well as what kinds of protections against deceptive design are in the EU General Data Protection Regulation.Full story