U.S. state-level comprehensive data privacy legislation is a "success story" given the bipartisanship state lawmakers are showing toward establishing consumer privacy protections, Mariner Strategies President Andrew Kingman and Associate Willy Martinez, AIGP, CIPP/E, CIPP/US, CIPM, CIPT, FIP, write in an op-ed.
The U.K. House of Lords European Affairs Committee sent a letter to Secretary of State for Science, Innovation and Technology Peter Kyle informing him of the committee's conclusions from its inquiry into EU-U.K. data adequacy. Much of the committee's work was based on the former government's Data Protection and Digital Information Bill that ultimately failed to pass in Parliament.
U.S. state legislatures were busy again with comprehensive privacy legislation this year. The IAPP U.S. Comprehensive Privacy Laws Report offers a window into the 2024 legislative activity in addition to other comprehensive state privacy laws enacted in recent years.
The U.S. Department of Justice issued a Notice of Proposed Rulemaking to implement the White House executive order banning sensitive data transfers to adversarial countries. The proposed rule would create "categorical rules for certain data transactions that pose an unacceptable risk of giving countries of concern or covered persons access to government-related data or bulk U.S.
The U.S. Consumer Financial Protection Bureau finalized a rule providing consumers better privacy and control over their personal financial data.
The Office of the Australian Information Commissioner updated guidelines around nonprofit organizations' privacy law compliance. The amended guidance includes recommendations for enhanced data security and complying with retention and deletion obligations. Additionally, the guidance focuses on partnering with fundraising and software vendors following a recent string of third-party data breaches in Australia.Full story
The Office of the Privacy Commissioner of New Zealand published information regarding citizens' right to privacy and the implications of filming individuals without their consent. The OPC said surveilling people for malicious purposes is unlawful under the Harmful Digital Communications Act and can "intrude on their privacy and can cause real harm."Full story
The Future of Privacy Forum will expand its bipartisan Multistate AI Policymaker Working Group focused on lawmaker collaboration to guide technology innovation and AI-related issues ahead of the 2025 legislative session. FPF Deputy Director for U.S.
The U.S. Securities and Exchange Commission charged four companies "with making materially misleading disclosures regarding cybersecurity risks and intrusions." The SEC issued a USD4 million civil penaltyto Unisys, a USD1 million civil penalty to Avaya Holdings, and two USD995,000 civil penalties to Check Point and Mimecast, respectively.
Meta will begin testing its facial recognition technology, which aims to block malicious advertisements by identifying ads created using public figures' Facebook photos, Reuters reports. The company previously shut down its facial recognition software in 2021 after it allegedly collected biometric data without consent.