Gov. Phil Scott, R-Vt., announced a veto of House Bill 121, the state's comprehensive privacy bill containing a private right of action, data minimization and a children's age-appropriate design code. The bill marked the first time a comprehensive law was passed by a U.S. state legislature with a PRA.
Meta says it will not support a potential NetChoice lawsuit against the Maryland Kids Code that requires social media platforms to strengthen security settings for underage users, The Washington Post reports. NetChoice and several industry groups previously said the law would "upend platforms' efforts to filter out harmful content and chill children's expression online."Full story
Pope Francis will focus on artificial intelligence risks during his visit to the G7 summit, the first time a pope has ever done so. He had previously called for an international treaty around AI. Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he examines the growing prevalence of wiretap litigation and its privacy impacts.Full story
The Council of the European Union agreed to a common negotiating position on proposed rules to harmonize cross-border enforcement of the EU General Data Protection Regulation. The position focuses on improved data protection authority cooperation and handling of complaints along with a proposed early resolution mechanism for amicable settlements.
Europeans went to the polls this past week to elect members of European Parliament, as well as national and local policymakers in some cases. IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, breaks down the composition of the new Parliament, pending final numbers, noting it "raises a genuine question about Parliament's ability to continue to legislate, debate and negotiate effectively and constructively."Full story
South Korea's Personal Information Protection Commission announced the completion of its review into some artificial intelligence applications for vulnerabilities. Its survey of four businesses found one instance of correction needed regarding the storage of text files and strengthening deidentification processes. Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, issued guidelines regarding required disclosures around changes to health data processing. The CNIL provided a brief FAQ detailing approaches and obligations associated with updates to initial processing disclosures.Full story
Facial recognition startup Clearview AI agreed to give individuals whose faces are in its database a combined 23% stake in the company, instead of cash payments, to settle a class-action lawsuit, The New York Times reports.
The U.S. Federal Communications Commission settled a data breach notification requirements case with Liberty Latin America. The telecommunications operator will pay a USD100,000 fine for alleged late notification that violated FCC rules and Liberty's license under a national security agreement. "The nexus between national security and consumer privacy and the protection of sensitive data is stronger than ever," FCC Enforcement Chief Loyaan A.