The German Ministry of Health announced the Health Data Use Act went into effect 26 March. The act aims to advance health research by granting pharmaceutical companies access to patients' health data for research purposes. Data available to researchers will be pseudonymized, with administrative fines given if patient privacy is violated.Full story
The IAPP published the seventh edition of "Privacy Law Fundamentals" by George Washington University Law School Professor Daniel Solove and University of California, Berkeley School of Law Professor Paul Schwartz. Solove and Schwartz analyze key provisions of privacy statutes and leading cases, overview various agency enforcement actions and more.
The Florida Legislature passed the Cybersecurity Incident Liability Act, HB 473, a bill providing immunity to companies that suffer a data breach, under certain conditions.
Ransomware group Star Fraud requested a USD30 million ransom payment for stolen data during a cyberattack in September 2023 on MGM Resorts International, The Wall Street Journal reports.
Some Major League Baseball teams will test a facial recognition system that allows ticket holders to scan their face instead of a ticket, ESPN reports. The optional program "analyzes a fan's face and converts each selfie into a unique number, which is then associated with purchased tickets and compared to the number generated by the stadium cameras."Full story
The IAPP launched the 2024 IAPP Governance Survey to collect data on organizations' privacy governance and compliance behaviors for a clearer picture of the compliance environment and a better understanding of how organizations address burdens.
Google to destroy data collected from the incognito Chrome browsing option as part of its settlement in a U.S. lawsuit, The Wall Street Journal reports.
Washington state's My Health My Data Act and Nevada's Senate Bill 370 took effect 31 March. Hintze Law's Kate Black and Felicity Slater and Future of Privacy Forum's Jordan Wrigley and Niharika Vattikonda discuss the laws' requirements for entities to analyze which elements of their health data collection, use and sharing are "necessary" to provide products or services requested by their consumers.Full story
The U.S. Federal Trade Commission denied "without prejudice" a request to use "Privacy-Protective Facial Age Estimation" technology. The technology studies a user's face to determine their age and obtain parental consent. The Entertainment Software Rating Board, Yoti, and SuperAwesome first requested to use the technology in 2023.Full story
The U.S. Consumer Financial Protection Bureau and Federal Trade Commission filed an amicus brief in the U.S. Court of Appeals for the 11th Circuit addressing what it called an "erroneous argument" over consumer reporting companies' obligation to correct consumer data errors under the Fair Credit Reporting Act.