The BBB National Programs' Digital Advertising Accountability Program said Indeed and Glassdoor have updated their data collection notifications and cross-app data collection policies after a consumer complaint. Both platforms are now in compliance with the Digital Advertising Alliance's Self-Regulatory Principles for online interest-based advertising.Full story
Montefiore Medical Center agreed to pay USD4.75 million to the U.S. Department of Health and Human Services' Office for Civil Rights to resolve claims it failed to protect patient data under federal health privacy rules after an employee illegally accessed and sold patient data in 2013. The agreement stated it is not an admission nor a concession from either party that Montefiore violated the U.S. Health Insurance Portability and Accountability Act.
Google's Threat Analysis Group released a report on commercial surveillance vendors and the effect spyware has on personal privacy. The report outlines "who is involved in developing, selling, and deploying spyware, how CSVs operate, the types of products they develop and sell, and our analysis of recent activity."Full story
The U.K. Information Commissioner's Office released its second report examining significant developments in technologies that could affect privacy in coming years. The industries focused on include genomics, personalized artificial intelligence, quantum computing and five others seen as being both an improvement and a potential risk to society.Full story
Members of the French government's Renaissance party voted against its cloud security strategy after previously supporting the EU Digital Services Act and Digital Markets Act, Euractiv reports. The proposed amendments would have allegedly "forced consulting companies to apply the same requirements as those designed for cloud service providers."Full story
404 Media investigated a website called OnlyFake that can produce fake IDs using "neural networks." The investigation found that OnlyFake was able to produce IDs that look identical to state-issued IDs, raising concerns about identity theft. The website went offline after claiming it is "against fraud and harming other people.
The IAPP Research and Insights Team released a new infographic that compiles all of its advertising technology reports from 2023 onto a single timeline. The resource highlights key legal, policy and enforcement trends that emerged in adtech last year, as well as the adoption of artificial intelligence technologies by advertisers.Full story
The U.S. District Court for the District of Idaho ruled the U.S. Federal Trade Commission can continue with its lawsuit against mobile data broker Kochava, which alleges the company sold consumers' precise location data, MediaPost reports. "This alleged invasion of privacy — which is substantial both in quantity and quality — plausibly constitutes a 'substantial injury' to consumers," Judge B.
The U.K. Competition and Markets Authority ordered Google to pause its efforts to eliminate third-party cookies until multiple competition-related concerns are addressed.
When Washington state's My Health My Data Act enters into force 31 March, nontraditional health care providers and other entities that maintain adverse event reporting programs will need to invest in compliance solutions.