The Leadership Conference on Civil and Human Rights released two reports examining the path forward for civil rights privacy and AI safeguards based on foundational civil rights protections. The coalition argues such protections are critical to ensure people's civil rights are upheld and data is not misused to perpetuate bias.Full story
South Korea's Personal Information Protection Commission issued a guidance regarding how data subject access rights apply to automated decision-making technologies. The guide is intended to help data subjects understand their rights and organizations understand their obligations under new ADMT regulations that entered into force 26 Sept.Full story
The Netherlands' data protection authority, the Autoriteit Persoonsgegevens, is asking for feedback on AI systems designed to manipulate and deceive as well as exploitative systems. The consultation deadline is 17 Nov.Full story
Japan's Personal Information Protection Commission published guidance on how to handle personal information compromised in data breaches at health care facilities such as hospitals, clinics and pharmacies. The PPC's recommended remedies include conducting regular training and ensure enough staffing during busy hours to avoid mistakes.Full story
In an op-ed for The Parliament Magazine, Transcend Field Chief Privacy Officer Ron De Jesus, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM, CIPT, FIP, said the EU AI Act will reshape the role of chief privacy officer.
The Center for Democracy and Technology published research on the impacts nonconsensual AI deepfakes are having on U.S. public school students. The CDT found 39% of students said they have heard about individuals at their school becoming victims of nonconsensual intimate imagery.
The Office of the Australian Information Commissioner announced it completed its investigation into 7-Eleven Stores' use of facial recognition after it previously found the company's use of the technology interfered with individuals' privacy.
The EU AI Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
The Court of Justice of the European Union issued a ruling stating data protection authorities are not obligated to render a fine or order corrective action following a data breach if the controller has taken remedial actions.
The European Commission announced that more than 100 companies signed a voluntary pledge to begin applying principles of the EU AI Act prior to its entry into application. Signatories range across size and industry.