The European Commission released a Q&A on the European Health Data Space proposal to advance digital health care while allowing patients to access their health data. The framework "builds upon the current cooperation for the primary use of data in healthcare within the eHealth Network."Full story
The discussion draft of the American Privacy Rights Act includes two targeted artificial intelligence policy sections and a data minimization provision that could have big consequences for the industry down the road. IAPP Staff Writer Caitlin Andrews takes a closer look at the bill's requirements and what areas will be closely watched going forward. Full story
The U.K. Upper Tribunal Administrative Appeals Chamber dismissed the U.K. Information Commissioner's Office appeal of a lower court's decision to overturn an order requiring Experian to change how it handles customer data. The court found some flaws in the First-Tier Tribunal's reasoning but no legal issues.Full story
Politico reports EU policymakers will not immediately consider addressing alleged TikTok issues following passage of a U.S. law forcing China-based ByteDance to divest the social platform over national security and sensitive data protection concerns.
The Czech Republic's data protection authority, Úřad pro ochranu osobních údajů, fined Avast Software CZK351 million for allegedly giving users' personal data to marketers without properly anonymizing it. The UOOU also claimed Avast misinformed users about how their data would be used.Full story
The European Parliament approved a provisional agreement to create the European Health Data Space, a portal allowing patients to access health data including information located in another member state. Some data will be anonymized or pseudonymized to be used in research.
The Court of Justice of the European Union's Advocate General Athanasios Rantos issued a nonbinding opinion in a case regarding personalized advertising based on public statements around sexual orientation. Rantos opined such disclosures make data "manifestly public," but subsequent public consumption cannot lead to nonconsensual data processing for targeted advertising purposes.
The California Privacy Protection Agency will hold three statewide informational sessions for stakeholders to provide feedback on proposed regulations on automated decision-making technology, risk assessments and cybersecurity audits. The sessions will offer an overview of the proposed regulations and inform attendees how to participate in the formal rulemaking process when it begins.
In a letter to the U.K. House of Lords, the European Parliament Committee on Civil Liberties, Justice and Home Affairs said changes to the U.K.'s data flow policies under proposed data protection reform could impact the EU-U.K. adequacy agreement. The committee expressed concerns about how a bill implementing new rules could bypass EU rules on international transfer and weaken U.K. enforcement.Full story
The European Commission's voluntary cookie pledge did not garner anticipated interest among major technology companies, Euronews reports. According to a Commission spokesperson, most stakeholders thought signing onto the pledge was "premature" given the Digital Markets Act and Digital Services Act recently entered into force.