The U.S. House approved the Protecting Americans' Data from Foreign Adversaries Act 414-0, CNBC reports. The bill prohibits data brokers from sharing sensitive personal data with an entity controlled by a "country of concern," including a company with more than 20% ownership by an entity in a covered jurisdiction.
BBB National Programs Vice President, Global Privacy Initiatives and Operations Divya Sridhar offers her key takeaways from the U.S.'s changing policy toward data flows after a White House executive order and additional congressional efforts to limit sensitive data transfers abroad. She examines how the initiatives will affect data localization laws, the digital economy and privacy standards going forward.Full story
A bill introduced by U.S. Sens. Ben Ray Luján, D-N.M., and Peter Welch, D-Vt., would require online platforms to ask for consumers' permission before using their data to train artificial intelligence tools.
The privacy and artificial intelligence communities have more in common than they may think. A new Organisation for Economic Co-operation and Development working group wants to guide that by bringing experts from both industries together to discuss solutions to common challenges. IAPP Staff Writer Caitlin Andrews spoke to some members about what's next for the effort.Full story
Finland's Office of the Data Protection Ombudsman fined online retailer Verkkokauppa.com 856,000 euros for alleged undefined data retention policies and requiring customers to make an account to purchase items, both violations of the EU General Data Protection Regulation.
Software company GuidePoint Security announced it will provide data privacy services. The services will include various tools including privacy assessments, program development and strategic advisement to "ensure customers are set up for long-term strategic success as they must navigate an increasing patchwork of legal requirements and obligations."Full story
Iceland's data protection authority, the Personuvernd, issued an advisory on the importance of data protection officers requirements under the EU General Data Protection Regulation. The regulator noted DPOs "must be independent, an expert in the data protection legislation, have adequate facilities and manpower and have direct access to senior management."Full story
Employment website Glassdoor updated its policy to have users verify their names, raising privacy concerns from users who have used the website to make anonymous reviews about their employers, Wired reports. Glassdoor's policy claimed names and email addresses are for "verification purposes only."Full story
Transcend hired Ron De Jesus, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM, CIPT, FIP, former chief privacy officer at Grindr, as its first field chief privacy officer. As field chief privacy officer, De Jesus will work with "privacy leaders across the industry to identify and promote governance strategies that reflect the complex and deeply technical demands of privacy." De Jesus is also co-leader of the IAPP's Diversity in Privacy Board.Full story
The California State Legislature saw an uptick in artificial intelligence-targeted legislation prior to its 16 Feb. filing deadline for the 2024 legislative session, IAPP Westin Research Fellow Andrew Folks, CIPP/US, writes.