Israel's Privacy Protection Agency published a report for organizations to ensure compliance with risk assessment requirements in order to protect consumers. Organizations must submit a risk assessment to the PPA showing they have enabled the proper safeguards to protect consumer information while also safeguarding the company's sensitive data from potential data breach risks.Full story
A majority of New Zealand residents are concerned about their privacy rights, according to results of a biennial survey conducted by the Office of the Privacy Commissioner of New Zealand.
The U.S. Department of Commerce signed route origin authorizations to ensure the department's websites are secure, Axios reports. The measure aims to "keep hackers from spoofing government domain names, stealing data flowing over these networks or hijacking traffic going to legitimate government websites."Full story
The Vermont General Assembly concurred on final approval of House Bill 121, the proposed Vermont Data Privacy Act, which includes a limited private right of action and data minimization requirements. HB 121's PRA is limited to data brokers and "large data holders" processing data on more than 100,000 Vermont residents. Coverage thresholds under the bill include businesses controlling or processing data on more than 25,000 residents or those generating more than 50% of gross revenue from data sales.
The U.S. Congressional Research Service published an overview of the proposed American Privacy Rights Act. The summary spells out the rights and obligations of "covered entities" under the draft bill, outlines the scope of Federal Trade Commission authority and how it authorizes state attorneys general to take civil actions for violations.
IAPP Research Analyst Cheryl Saniuk-Heinig, CIPP/E, CIPP/US, analyzed the pros and cons of including a private right of action in the American Privacy Rights Act discussion draft. She outlines the history of federal and state-level PRAs while comparing the APRA's PRA language to that of its predecessor, the proposed American Data Privacy and Protection Act.
MediaPost reports on how advertisers and publishers are working to move past Google's third-party cookie depreciation and find new ways to market their information. Artificial intelligence and identity-free solutions are among the potential cookie alternatives being examined.Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, submitted its contributions for potential amendments to the country's draft artificial intelligence regulation. The ANPD proposed definition changes, classifying high-risk systems and more.
The FBI claims hackers are using generative artificial intelligence technology to deploy large-scale cyberattacks, The Wall Street Journal reports. FBI Cyber Division Deputy Assistant Director Cynthia Kaiser said, with AI technology, a "beginner can get to an intermediate level" and "even our most advanced adversaries are at least becoming more efficient at what they do."Full story
Ukraine Parliamentary Commissioner for Human Rights issued an advisory regarding obligations to protect personal information and to use data sparingly. The commissioner's office stressed employees of an institution must follow legal requirements when creating a data record.Full story