In an op-ed for The Hill, U.S. Department of Health and Human Services' Office of Civil Rights Director Melanie Fontes Rainer touted the recently approved Health Insurance Portability and Accountability Act rule on the disclosure of individual's reproductive health data in legal investigations.
The U.S. Federal Trade Commission updated the Health Insurance Portability and Accountability Act's Health Breach Notification Rule. The revised rule includes updated definitions to "underscore application" to health apps and "similar technologies not covered by HIPAA." Changes to the consumer and agency breach notice requirements are also included.
The second AI Safety Summit hosted virtually by the U.K. and South Korea in May is drawing less fanfare than the first summit last year, Reuters reports. Leading artificial intelligence policymakers from the EU and the U.S. are uncertain about attending the 21-22 May summit, while Canada and the Netherlands have declined the invite.
The U.K. Competition and Markets Authority published its 2024 first quarter report on Google's efforts to implement the Privacy Sandbox.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced the authorization of the Security Incident Communication Regulation, which aims to strengthen cybersecurity practices and increase transparency. The RCIS requires organizations to report security incidents that "may cause relevant risk or damage" to the ANPD and the data subject.Full story
An alleged "hallucination" by OpenAI's ChatGPT is the basis of a privacy complaint to Austria's Data Protection Authority, Politico reports. Privacy rights group NOYB claimed the chatbot produced the wrong birthday of the group's founder, which could be a violation of the EU General Data Protection Regulation because birthdates are considered personal information under the law.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, will begin a consultation toward "updating and creating new standards" for health data processing.
The U.K. enacted new security rules featuring a "raft of transformative protections" related to Internet-of-Things devices and other connected products. Covered entities will be required to ensure strong device passwords while providing clear consumer incident reporting instructions to "increase the speed at which they can address these problems."Full story
Health care company Kaiser Permanente's online tracking software allegedly shared the personal data of 13 million customers with third parties, The Record reports. The company is currently facing a class-action lawsuit over its previous use of tracking technology.Full story
A data broker published the sensitive passport information of more than 60 German residents online, Netzpolitik reports.