In a study, the U.S. Government Accountability Office found biometric technologies are improving but still need better demographic diversity training data to address accuracy gaps. The GAO recommended five areas of improvement policymakers could look at, including risk-based approaches to regulation and implementing comprehensive privacy law or guidance around the technology.Full story
The U.S. Federal Trade Commission is sending USD5.6 million worth of refunds to Ring camera customers who were affected by the company's alleged insufficient data security and nonconsensual data use for algorithm training.
Rehabilitation health care provider Ernest Health is facing a class-action privacy lawsuit over a January cyberattack that allegedly breached sensitive patient information, Top Class Action reports. The lawsuit claimed Ernest Health did not have adequate cybersecurity safeguards and failed to protect patients' personally identifiable information.Full story
The U.S. Department of Health and Human Services Office for Civil Rights announced a finalized rule under the Health Insurance Portability and Accountability Act to strengthen privacy protections for reproductive health care.
IAB Europe published a response to the European Data Protection Board's opinion on the legality of pay-or-consent models for obtaining valid consent to process personal data.
The U.K. National Cyber Security Centre updated its cyber assessment framework to include a focus on critical infrastructure vulnerabilities. It now includes sections on remote access, privileged operations, user access levels and multifactor authentication.Full story
Following India's election, the new government plans to introduce an amendment to information technology rules under the Digital Personal Data Protection Act, Business Standard reports. The amendment will reportedly address governance requirements for preventing misinformation created by artificial intelligence and deepfakes.Full story
The European Data Protection Board issued its 2023 Annual Report.
The California State Senate Committee on Rules appointed Drew Liebert, an attorney who most recently served as the Senate majority leader's chief of staff, to the California Privacy Protection Agency Board. Liebert replaces Lydia de la Torre, whose three-year term ended in March.Full story
A report by Stanford University showed an increase in artificial intelligence-generated child sexual abuse material could overwhelm the National Center for Missing and Exploited Children's CyberTipline, The New York Times reports. Computer Scientist and adjunct professor at Stanford University Alex Stamos said "one million identical images is hard enough, one million separate images created by A.I. would break" the CyberTipline.Full story