The U.K. and U.S. governments released a joint statement calling on digital platforms to place a greater emphasis on keeping children safe online. The statement includes the establishment of a U.K.-U.S.
The European Data Protection Board will hold a virtual stakeholder event to provide input on AI models following a request for an Article 64(2) EU General Data Production Regulation opinion made by Ireland's Data Protection Commission. Individuals representing sectoral trade groups, NGOs and individual businesses are invited to participate. The EDPB will hold a call 15 Oct.
A series of cyberattacks breached the data of 31 million users of digital library service Internet Archive, Infosecurity Magazine reports. The cyberattacks breached users' personal information including email addresses and bcrypt password hashes. The company said it disabled its library and upgraded its systems to prevent additional breaches.Full story
The Council of the European Union's second draft of a compromise text on telecommunications consolidations may require messages to have greater privacy security measures and could see a revival of the e-Privacy directive, Euractiv reports. The draft is expected to be discussed 15 Oct. during a Telecom Council working party meeting.Full story
The third time's the charm, IAPP Managing Director, Europe, Isabelle Roccia writes, as the European Commission's first review of the EU-U.S. Data Privacy Framework concluded U.S.
The Council of the European Union adopted a law requiring products with digital elements to have stronger cybersecurity measures before being made available on the market. The new regulation "aims to fill the gaps, clarify the links, and make the existing cybersecurity legislative framework more coherent, ensuring that products with digital components ... are made secure throughout the supply chain" and life cycle.
Germany's national competition regulator, the Bundeskartellamt, closed its proceedings against Meta. The company agreed to allow users to decide which accounts to connect and share data with for advertising purposes, add more notifications if someone chooses to combine accounts, and limit the data it collects and how long it stores it.Full story
The U.S. Federal Trade Commission published a proposed settlement order to resolve charges Marriott International and subsidiary Starwood Hotels and Resorts Worldwide failed to implement "reasonable" data security practices that resulted in three major data breaches from 2014-20 that affected more than 334 million customers worldwide. Under the proposed order, the hotel chains agreed to implement stronger data security practices.
The European Data Protection Board will focus on the implementation of the right to erasure by controllers for its fourth Coordinated Enforcement Action. The action will look at different processes used by data controllers to allow people to exercise the right and determine any issues or best practices.Full story
Euronews reports only two countries, Belgium and Croatia, have informed the European Commission about their transposition of updated EU cybersecurity rules. The implementation deadline for the Network and Information Security Directive 2, which is meant to improve cybersecurity infrastructure across the bloc, is 17 Oct.