Italy's data protection authority, the Garante, fined UniCredit Bank 2.8 million euros for alleged insufficient cybersecurity measures to prevent a data breach. The agency also fined security provider NTT Data Italia 800,000 euros for reporting the breach after the required deadline.Full story
Euractiv reports three adult content sites are suing the European Commission for including them on a list of sites that have added responsibilities for content moderation under the Digital Services Act. They argued the Commission miscalculated their user numbers and say the requirement to report advertisers is illegal; the Commission has pushed back against those claims.Full story
A ransomware group stole and published sensitive data from Switzerland's government, including approximately 65,000 classified documents, Infosecurity Magazine reports. The breach also leaked citizens' personally identifiable information.Full story
IAB Europe launched The Post Third Party Cookie Countdown webinar series that will detail the deletion of third-party cookies. The series intends to "bring together stakeholders from across the ecosystem for collaborative discussions, knowledge sharing, and an exploration of alternative solutions."Full story
We know there's a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you.
South Korea's Personal Information Protection Committee announced it is investigating personal data processing activities by foreign retailers. The PIPC aims to "check the adequacy of personal information processing policies, overseas transfers, and safety measure obligations under the Personal Information Protection Act."Full story
The Court of Justice of the European Union found IAB Europe's Transparency and Consent Framework strings contain personal data, making them subject to the EU General Data Protection Regulation.
New Hampshire Gov. Chris Sununu, R-N.H., signed the comprehensive consumer privacy bill, SB 255, into law, giving residents the right to understand how their data is collected and held. Provisions of the law take effect 1 Jan. 2025. New Hampshire is the 14th U.S. state to have a comprehensive privacy law.
The EU Digital Markets Act took force 7 March, with all covered entities now required to comply with all facets of the law. IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, developed an infographic detailing the major obligations of large technology platforms designated as "gatekeepers" under the law.Full story
The European Data Protection Supervisor will host a 20th anniversary summit 20 June. The all-day program includes remarks from European Data Protection Supervisor Wojciech Wiewiórowski and a series of panel discussions, such as a session examining how data protection laws should apply to public authorities.Full story