Sweden's data protection authority, the Integritetsskyddsmyndigheten, released its annual report 2023. The IMY indicated it will continue prioritizing guidance for data protection compliance and innovative technology such as artificial intelligence. The report highlighted recently completed projects on a federated learning AI model for health care systems and public safety sensors in place of surveillance cameras.Full story
The U.S. National Institute of Standards and Technology finalized an update of its Cybersecurity Framework, which was last updated in 2014. The CSF 2.0 supports implementation of the U.S. National Cybersecurity Strategy with a broadened scope beyond protecting critical infrastructure and includes resources and best practices applicable to organizations across all economic sectors.
South Africa's Information Regulator announced its first direct marketing enforcement under the Protection of Personal Information Act. The regulator ordered technology consultancy FR Ram Consulting to amend its direct marketing practices to ensure proper consent is obtained before interacting with consumers through various marketing communications.
The Markup reports on efforts to ensure the now-bankrupt data broker company Near did not sell its sensitive data as it looks to offload its assets. Restrictions were placed on the sale after U.S. Sen Ron Wyden, D-Ore., urged the U.S. Federal Trade Commission to protect customers' location data.Full story
Political advertising must be clearly labeled and targeting techniques online will only be allowed after consent is given under new European Parliament rules. The rules next move to the European Council where, if adopted, they will enter into force 18 months later.Full story
U.S. state and federal regulators are investigating a September 2023 cyberattack on MGM Resorts International, Reuters reports.
Italy's data protection authority, the Garante, announced a 30-day comment window for public input on the retention period for employee emails. It has deferred recent guidance on the metadata storage timeline of emails after receiving several requests for clarification.Full story
The Office of the Privacy Commissioner of Canada announced it will investigate a data breach of Global Affairs Canada that stole personal data from employees and online users. The OPC will "examine the adequacy of the safeguards that are in place to protect personal information and assess compliance with the Privacy Act."Full story
The California Privacy Protection Agency Board will hold its next public meeting 8 March. The major agenda item is a discussion on taking potential action to advance draft automated decision-making technology regulations to the formal rulemaking phase.
The U.K. Information Commissioner's Office opened the second round of its generative artificial intelligence consultation. The consultation will focus on how purpose limitation should be applied at all phases of the generative AI life cycle. The first ICO generative AI consultation focused on the legality of processing data scraped from the internet for generative AI models.