The U.S. National Institute of Standards and Technology issued finalized guidelines for federal contractors storing sensitive data, including employee health information and intellectual property.
Spain's data protection authority, the Agencia Española de Protección de Datos, updated its third-party cookie guidelines in response to the European Data Protection Board's opinion on pay-or-consent advertising models. The EDPB opined in April that models allowing users to pay a fee to opt out of targeted marketing did not offer a valid consent option.Full story
The U.S. Federal Trade Commission published an advisory regarding compliance requirements under an amendment to the Gramm-Leach Bliley Safeguards Rule. The rule has a reporting requirement compelling businesses to notify the FTC within 30 days of a security breach if it affects at least 500 people.Full story
The New York Department of Financial Services released a Cybersecurity Program Template to ensure businesses comply with regulations while understanding necessary actions to ensure consumer information is safeguarded. The template aims to provide information for small businesses on developing privacy safeguards and effectively implementing compliance measures.Full story
The Digital Regulation Cooperation Forum released a joint report by the U.K. Information Commissioner's Office and the Financial Conduct Authority on consumer behavior with digital assets. The report focuses on the development of financial technology, potential privacy risks, regulatory actions and consumer benefits of digital assets.Full story
An investigation of more than 700 mortgage broker websites by The Markup found more than 200 shared users' personal data with Facebook due to an embedded Meta Pixel. The personal information tracked by Meta Pixel included credit information, veteran status and occupation, as well as hashed usernames and email addresses.Full story
U.S. law enforcement agencies are allegedly testing surveillance technology that can detect devices within vehicles, including smart devices and pet tracking chips, Forbes reports.
The biggest wrinkle to date in the U.S. comprehensive state privacy law patchwork is on the cusp of finalization as Vermont aims to enact its bill containing a limited private right of action. The groundbreaking inclusion of the PRA highlights a slew of enhanced consumer protections Vermont state lawmakers landed on in their proposal, which will soon head to the governor's desk.
Ireland's Human Rights and Equality Commission said a proposed bill allowing state police to use facial recognition technology lacks sufficient safeguards to prevent rights violations, Irish Legal News reports. It recommended the bill be studied by an independent body to find any other potential issues and that strict safeguards be put around biometric technology in policing.Full story
Ontario Minister of Public and Business Service Delivery Todd McCarthy introduced the Strengthening Cyber Security and Building Trust in the Public Sector Act. The bill aims to enact the Enhancing Digital Security and Trust Act to strengthen cybersecurity safeguards, protect children's privacy and address the use of artificial intelligence.Full story