The IAPP is collecting responses to the 2024 IAPP Governance Survey. The annual survey aims to collect data on organizations' privacy governance and compliance behaviors for a clearer picture of the compliance environment and a better understanding of how organizations address burdens.Full story
A U.K. lawsuit claims dating app Grindr shared users' sensitive information, including HIV status, with third parties without consent, Reuters reports.
In an op-ed for AdExchanger, Neolaw co-founder and Privacy Lawyer Andy Hepburn, CIPP/US, said the Global Privacy Control that allows consumers to opt out of targeted advertisements is too restrictive. Hepburn said a better approach for GPC settings "would enable advertisers to deliver relevant ads to consumers for the products and services that interest them."Full story
The U.S. Senate opened debate on reauthorization of Section 702 of the Foreign Intelligence Surveillance Act with a 67-32 procedural vote, CNN reports. It is unclear if the Senate will formally pass the House bill for renewing FISA before Section 702 sunsets 19 April. Bipartisan opposition to renew could draw out the voting process to as late as 21 April.
The U.K. Information Commissioner's Office found Google's proposed third-party cookie replacement, the Privacy Sandbox, needs to better protect users' personal data, according to ICO draft documents obtained by The Wall Street Journal.
The European Commission published an overview of the Data Act. The law raises rules on who can access and use data generated in the EU across all economic sectors while establishing the conditions upon which public sector entities can obtain request data from businesses "where there is an exceptional need."Full story
The European Data Protection Board's opinion on the pay-or-consent models being deployed by large online platforms as a legal construct to support behavioral advertising, is generating unprecedented aggravation and heated opinions, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes.
South Korea's Personal Information Protection Committee updated guidelines for conducting data protection impact assessments under the Personal Information Protection Act. The revised notice includes new sections on automated decision-making technology, pseudonymous information processing and changes to the evaluation system.Full story
Italy's data protection authority, the Garante, and Germany's Federal Commissioner for Data Protection and Freedom of Information will meet for a two-day summit 19-20 April to discuss age verification systems, artificial intelligence and pay-or-consent models.Full story
Electronic Frontier Federation Staff Attorney Mario Trujillo urged U.S. Congress to allow for a private right of action, limit data sharing with the government and not preempt states from having stronger privacy laws under the proposed American Privacy Rights Act. He said the bill's focus on online data protection is positive but that federal law should be a minimum standard for states to build on.