A member of European Parliament said the proposed U.K. Data Protection and Digital Information Bill could impact the adequacy decision between the EU and the U.K., Euractiv reports. The two entities' current data transfer agreement acknowledges U.K. data protection standards are equivalent to the EU General Data Protection Regulation, but Dutch MEP Paul Tang said the proposed U.K.
The U.K. Information Commissioner's Office ordered Serco Leisure to stop using facial-recognition technology and fingerprinting to monitor worker attendance. The agency said the company did not show why the biometric tracking was necessary.
The Swedish data protection authority, Integritetsskyddsmyndigheten, is looking for data protection officers to participate in a reference groups to get input on draft guidance. Interested parties have until 8 March to register.Full story
The U.S. Federal Trade Commission lodged a complaint against tax preparation company H&R Block over allegations of deceptive marketing and unfairly deleting customers' data. The agency said H&R Block leads customers into paying for products they do not need.Full story
The National Bureau of Economic Research found EU General Data Protection Regulation compliance costs have reduced the amount of data collected and stored, ITPro reports. The research indicated businesses have adapted to the GDPR's expenses by "decreasing their data storage by just over a quarter and their data processing by 15%."Full story
Privacy-enhancing technologies could provide a solution to stand up the EU-U.S. Data Privacy Framework, Centre for European Policy Studies Researcher Camille Ford wrote in an op-ed. Ford said the EU and U.S.
In an op-ed for The New York Times, Columbia University law professor Tim Wu said technology companies' digital platforms need to face stronger regulations. "Nearly everything TikTok or Instagram does involves moving and sorting information, even if it is just displaying search results or quietly collecting your personal data. The tech giants are pushing the simplistic position that any such conduct is 'speech,' Wu said.Full story
The EU General Data Protection Regulation requires the appointment of an EU-based representative since the law became effective in 2018. Other EU digital laws coming online in the next few years, including the Digital Services Act, will similarly require a representative appointment. DataRep Managing Director Tim Bell explains now is the time for international organizations to reengage with EU representative obligations.Full story
There is motivation around the world to improve children's privacy protections. Australia is among the jurisdictions poised to address youth privacy concerns through proposed Privacy Act reform and other regulatory updates. Block Senior Privacy Manager Ilana Singer, CIPP/E, CIPM, CIPT, offers a rundown of all the current Australian children's privacy initiatives.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week he unpacks why the decades-old California Online Privacy Protection Act played a prominent role in the California attorney general's second settlement under the California Consumer Privacy Act.Full story