France's data protection authority, the Commission nationale de l'informatique et des libertés, issued its 2023 annual report, which indicated the regulator received 35% more complaints in 2023 from the general public than in 2022. The CNIL also saw increases in website traffic, particularly to its frequently asked questions page, an indicator of the public's interest in privacy.Full story
Class-action lawsuits were filed against AT&T, Change Healthcare, GardaWorld, SouthState Bank, WellNow Urgent Care, The Aspen Group, Golden Corral and American Vision Partners following data breaches, Top Class Actions reports.
A report by cybersecurity company Coveware found only 28% of companies paid ransomware groups in the first quarter of 2024, Bleeping Computer reports. The average ransomware payment decreased from USD568,705 in 2023 to USD381,980 in 2024.
U.S. President Joe Biden signed legislation reauthorizing Section 702 of the Foreign Intelligence Surveillance Act 20 April, The Associated Press reports. The Senate passed a bill 60-34, renewing Section 702 authority just after the deadline for the program to expire.
The U.S. House voted in favor of fast-tracking a bill to compel TikTok's parent company, ByteDance, to divest itself of the app, The New York Times reports. If passed and signed into law, the bill would give ByteDance up to one year to find a U.S.-government approved buyer for TikTok or face a nationwide ban.
The Netherlands' data protection authority, the Autoriteit Persoonsgegevens, warned government offices not to use Facebook if they are uncertain how visitors' data will be affected. The AP said after a 2021 investigation it could not determine whether visitor information is collected legally by the platform.Full story
The IAPP released several full-length keynote presentations from the IAPP Global Privacy Summit 2024. Columbia University Law Professor Anu Bradford discussed the differences between digital regulatory models in China, the EU and the U.S. and their implications for liberal democracy.
The U.S. District Court for the Northern District of California agreed to the settlement terms of Google's location privacy lawsuit that would require Google to pay USD62 million, MediaPost reports. The class-action lawsuit accused Google of storing "location data harvested from some services, including search and maps, even when users have attempted to prevent the data collection."Full story
Israel's Privacy Protection Agency issued analysis of health care providers' data privacy compliance. The PPA report is based on a survey to health entities on organizational and corporate governance, database management and information security. Following discovery and notice of compliance shortcomings, the PPA found the 45% of noncompliant entities corrected the previously cited issues.Full story
South Korea's Personal Information Protection Committee and the Korea Internet and Security Agency launched a pilot program for a joint privacy-by-design certification. The program is intended to improve personal information collection devices present in everyday life. The first approved certification went to a home security camera manufacturer.Full story