South Korea's Personal Information Protection Commission published guidelines for creating a data processing policy. The guidelines seek to assist organizations in developing their own data processing policies to facilitate compliance with the Personal Information Protection Act.Full story
Denmark's data protection authority, Datatilsynet, responded to an inquiry from the Children's Rights National Association, Børns Vilkår, that claimed social media platforms may violate age limit requirements set within the Danish Data Protection Act.
Israel's Ministry of Justice introduced a bill that allows alleged privacy violations to be included in class-action lawsuits.
While the use of cookie banners for obtaining user consent is becoming a common method to notify users and meet choice obligations, Red Clover Advisors founder and CEO Jodi Daniels, CIPP/US, writes adding a banner to a website "isn't a quick trip to compliance." Daniels said an effective cookie governance program includes a "cross-functional" leadership team, a company-wide governance policy, effective systems and technology to respect users' preferences, and more.
The Global Cross-Border Privacy Rules Forum is seeking to connect the dots for the international free flow of data through its own rules framework and its newly released Privacy Recognition for Processors System. Both certification systems involve accountability agents, with the BBB National Programs among the newly appointed agents across five jurisdictions.
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, issued guidance detailing why scraping data from websites is illegal under the EU General Data Protection Regulation in most contexts.
The California Privacy Protection Agency published its agenda for its 10 May public board meeting. Key discussion items include potential updates on the agency's data broker registration regulations and a nonpublic session to discuss the agency's litigation with the California Chamber of Commerce.
The U.S. National Security Agency's disclosure report showed U.S. citizens appeared 31,000 times in the agency's foreign spy reports in 2023, The Wall Street Journal reports.
The U.K. Information Commissioner's Office issued a joint statement with the Office of Communications regarding collaboration on regulating digital services where online safety and data protection intersect.
Norway's data protection authority, Datatilsynet, released its 2023 annual report highlighting the regulator's enforcement actions and data security strategies. The DPA detailed its Project Kvist that allowed businesses to provide feedback on the agency's operational efforts and its current plans to navigate the advancement of artificial intelligence technology.Full story