The U.S. National Institute of Standards and Technology published its second public draft on digital identity guidelines. The draft incorporates responses from stakeholders received on the draft guidance in 2023. The NIST invites the public to make comments on the new draft until 7 Oct.Full story
A panel of judges from the U.S. Court of Appeals for the Ninth Circuit reversed a decision to dismiss a class-action lawsuit filed against Google Chrome over the company's alleged data collection practices, The Verge reports. The lawsuit claimed Chrome collected users' "browsing history, IP addresses, persistent cookie identifiers, and unique browser identifiers without their explicit permission."Full story
The Center for Democracy and Technology wrote about a U.S. Senate provision that would limit the entities required to help with surveillance efforts under Section 702 of the Foreign Intelligence Surveillance Act but those entities would be left anonymous. It argues Congress needs to push back in part because there is no warrant or independent arbiter for Section 702 directives.Full story
To help U.K.-based small- and medium-sized enterprises meet data subject notification requirements, the Information Commissioner's Office released a Privacy Notice Generator tool as part of its ICO25 Strategic Plan. The tool allows SMEs in all sectors to develop tailored privacy notices for both internal and external communications. IAPP Staff Writer Alex LaCasse spoke with the ICO about the launch.Full story
Privacy advocacy group NOYB and the European Center for Digital Rights filed two complaints against the European Parliament with the European Data Protection Supervisor after an April data breach of its recruitment system exposed the sensitive personal information of staffers, Euractiv reports. The complaints were filed on behalf of four European Parliament staffers.
The U.S. National Institute of Standards and Technology's National Cybersecurity Center of Excellence will release a series of white papers titled "Applying 5G Cybersecurity and Privacy Capabilities." The series will examine the cybersecurity and privacy program management of mobile network operators, 5G network operators and organizations using 5G-enabled technology.Full story
The Securities and Exchange Board of India published a Cybersecurity and Cyber Resilience Framework for entities regulated by the agency. The framework aims to address evolving digital threats and align SEBI-regulated entities' cybersecurity posture with global industry standards. Full story
According to Husch Blackwell's ByteBack, Gov. J.B. Pritzker, D-Ill., signed into law a bill to amend the Illinois Human Rights Act to include provisions regulating the use of artificial intelligence in employment settings.
The Chronicle reports 57 new Zimbabwe-based data protection officers graduated from the Data Protection Officer Certification Programme. The joint collaboration between the Postal and Telecommunications Regulatory Authority of Zimbabwe and the Harare Institute of Technology was launched in response to the Cyber and Data Protection Act, which required the authority to develop a data protection framework.Full story
Prominent social media platforms, such as TikTok, YouTube and Telegram, allegedly contain guides to trick teenagers into sending intimate photos and then blackmailing them for money, the Guardian reports. All three platforms said they have taken steps to detect and remove such content when it is brought to their attention.Full story