Norway's data protection authority, Datatilsynet, will issue a voluntary survey to all registered data protection officers to better understand their daily work and companies' compliance with the EU General Data Protection Regulation. Datatilsynet Data Protection Officer Coordinator Ove Skåra urged participation so the agency can "get a good knowledge base about what it is like to be" a DPO.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, and competition authority, the Autorité de la concurrence, completed their examination of how privacy and competition work together. The review concluded with 15 proposals on how the two agencies could work together on intersecting priorities.Full story
Join the IAPP for a LinkedIn Live 25 March for a discussion about changing jobs mid-career in the fields of privacy, AI governance and cybersecurity.
The Interactive Advertising Bureau released a survey that found the industry would prefer a comprehensive U.S. privacy law rather than a patchwork from states. Other key takeaways from respondents across the advertising technology ecosystem were the challenges around defining sensitive personal data and data clean room capabilities. Full story
South Korea's National Assembly passed an amendment to the Personal Information Protection Act concerning appointment of "domestic agents" by foreign entities. The amendment requires foreign data processors to establish domestic supervision of processing activities and have those agents register in country.Full story
Finland's Office of the Data Protection Ombudsman launched an investigation into the University of Helsinki's data protection safeguards after reviewing data transfers of biometric research data to Chinese biotechnology company BGI Group.
The European Data Protection Board released its report detailing the Support Pool of Experts external experts projects in 2024, including its work to assess AI systems' bias and processing of personal data. The SPE will continue its efforts in 2025, with projects focusing on the right of access, and a bootcamp to examine best practices for mobile app auditing.Full story
Amazon will no longer allow Echo users to opt out of sharing their voice recordings, USA Today reports. The company will now launch a feature that processes recordings in the company's cloud before being deleted.
Google acquired cybersecurity company Wiz for USD32 billion to strengthen Google's cloud computing efforts and provide security to AI companies, The Wall Street Journal reports.
The U.K. Information Commissioner's Office agreed to new commitments under the U.K. government's growth agenda that aim to balance data protection and consumer trust with economic growth and investment. The raft of measures include piloting a data protection sandbox regime, advertising technology regulatory reviews, updated guides for AI and international data transfers, and more. IAPP News Editor Joe Duball reports on the ICO's new measures.Full story