FTC takes action against deceptive AI use
The U.S. Federal Trade Commission announced its Operation AI Comply initiative will bring enforcement actions against five companies for alleged deceptive and harmful AI use.
The U.S. Federal Trade Commission announced its Operation AI Comply initiative will bring enforcement actions against five companies for alleged deceptive and harmful AI use.
South Korea's Personal Information Protection Commission issued a KRW1.14 billion fine to Worldcoin and its affiliates for alleged violations of the Personal Information Protection Act. The PIPC claimed Worldcoin collected biometric data from users in exchange for digital assets without a legal basis, and transferred the data to third countries in violation of the PIPA.
The Office of the Privacy Commissioner of New Zealand urged businesses to consider swift data breach notification practices. Commissioner Michael Webster addressed the need after a health care group allegedly ignored its reporting requirements for privacy breaches several times. He said talking to the office even if all the details of a possible breach are not known helps solve the problem quicker.Full story
Norway's data protection authority, Datatilsynet, discussed its part in the country's newly released digital strategy. The plan, which runs through 2030, emphasizes building privacy into the public sector's information technology framework and continuing to protect citizens' data from Big Tech companies.Full story
Reuters reports the U.S. District Court for the Southern District of New York struck down a law requiring food delivery services to provide customer data to the restaurants they order from. A group of delivery companies argued the law intruded on customers' privacy rights and threatened their business prospects.Full story
Sweden's data protection authority, the Integritetsskyddsmyndigheten, said it supports police use of surveillance tools, however, safeguards to protect individuals' privacy must remain a top priority.
Security researchers found a flaw with an automaker's website that allows hackers to access vehicle locations and gain control of certain features, Wired reports. Researcher Neiko Rivera said automotive companies typically focus on "'embedded' devices — digital components in non-traditional computing environments like cars — rather than web security," leading to security issues for the company and consumers.Full story
The IAPP Privacy. Security. Risk. 2024 closing general session focused on AI's future impact on the privacy world and beyond. Former Google Chief Privacy Officer Keith Enright shared his views on the technology industry's changing role, while three current CPOs mused about how professionals can meet those changes. IAPP Staff Writer Caitlin Andrews breaks down the big takeaways from the conversation.
The U.S. is on its way to restricting certain transfers of personal data to adversarial countries by way of a presidential executive order and approved bipartisan legislation. For companies, complying with two sets on unaligned requirements may prove difficult without attention to detail. IAPP News Editor Joe Duball reports on musings from an IAPP Privacy. Security. Risk.
In the absence of comprehensive U.S. privacy legislation, Consumer Reports and the Electronic Privacy Information Center partnered to draft the State Data Privacy Act. The framework is intended to serve as model legislation for state lawmakers to draft a consumer privacy law.