The Netherlands' data protection authority, Autoriteit Persoonsgegevens, released a report answering questions on facial recognition programs. The AP said the technology can be used if it is "necessary for authentication or security purposes," otherwise the use of biometric data should be limited and can not be used to confirm someone's identity.Full story
Data broker Kochava and the U.S. Federal Trade Commission requested an extension on pretrial paperwork to "facilitate settlement talks" during its ongoing privacy lawsuit, MediaPost reports.
We know there's a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you.
Several U.S. regulators have raised concerns over the potential privacy implications of vehicles' internal systems that could "seriously threaten Americans' privacy" by disclosing personal information about drivers, The New York Times reports.
The IAPP Research and Insights team and OneTrust analyzed the laws, policies and broader contextual history relevant to artificial intelligence governance in certain jurisdictions. The third analysis in the five-part series outlines the U.S.'s keys to governing the strategic, technological and compliance landscape for AI governance.Full story
Italy's data protection authority, the Garante, allowed OpenAI to reactivate ChatGPT in the country after meeting several conditions related to personal data processing under the EU General Data Protection Regulation, Reuters reports. OpenAI committed to providing "greater visibility of its privacy policy and user content opt-out form," while also providing a new opt-out form for EU citizens to decline ChatGPT using their personal data to train its model.
BBB National Programs' Children's Advertising Review Unit issued a compliance warning for applying its Advertising and Privacy Guidelines in the context of artificial intelligence. The guidelines warn companies using AI should be cautious of the technology deceptively advertising to children through AI-created deepfakes, product depictions created by AI and AI-generated imagery.Full Story
The U.S. Federal Trade Commission finalized its January order against data broker InMarket Media over claims of improper location data collection. Per the order, InMarket is barred from selling, sharing or licensing consumer location data and must delete such existing data if it does not obtain valid consent from customers.Full story
The U.S. Cybersecurity and Infrastructure Security Agency plans to roll out a voluntary pledge committing U.S.-based technology companies to strengthening cybersecurity standards under the agency's Secure by Design initiative, Wired reports.
Health insurance company UnitedHealth Group confirmed to the U.S. Senate Committee on Finance that it paid hackers USD22 million in ransomware payments, CNBC reports.