The European Data Protection Board released a website auditing tool for EU General Data Protection Regulation compliance. The auditing tool was developed by the EDPB Support Pool of Experts and can be used by data protection authorities, in addition to data controllers and processors, to streamline the "preparing, carrying out and evaluating" of audits. Full story
California Attorney General Rob Bonta announced his office is issuing notices to streaming service providers for their alleged violations of the California Consumer Privacy Act. The letters specifically address the streaming service providers' level of compliance for offering users easy opt-out mechanisms for the sale of their personal data. Full story
Italy's data protection authority, the Garante, issued a notice to OpenAI that its ChatGPT chatbot allegedly violates the EU General Data Protection Regulation. The Garante ruling follows a temporary 30-day ban on processing data issued to OpenAI in March 2023. The company has 30 days to respond to the Garante's notice.
The White House announced all federal agencies met the 90-day tasks stipulated in U.S. President Joe Biden's executive order promoting the safe adoption and development of artificial intelligence technologies.
LinkedIn Vice President and Head of Global Privacy Kalinda Raina, CIPP/US, reflected on Data Privacy Day 2024, discussing how the privacy profession has grown over the years and the expectation it will continue to grow as artificial intelligence proliferates.Full story
The U.S. National Institute of Standards and Technology is set to begin updating the latest version of its Privacy Framework and will create a joint Data Governance Profile among its frameworks. The NIST seeks public input on what the resources should look like.Full story
The White House Office of Management and Budget is asking U.S. agencies to provide information on how artificial intelligence is considered when putting together privacy impact statements, FedScoop reports. They are also asked to give feedback on how to improve risk mitigation on those topics. The request is part of the White House's executive order on AI requirements.Full story
The European Data Protection Supervisor Wojciech Wiewiórowski said extending a regulation that allows certain communication services to scan data for possible child sexual abuse material would infringe on the public's privacy rights.
The discovery of a TikTok tracking feature on one of New Zealand's biggest banking websites has other retailers watching an investigation of the social media platform closely, the New Zealand Herald reports.
Denmark's data protection authority, Datatilsynet, updated its strategy for data and risk-based work with initiatives focused on "strengthening the authority's data quality, data sources, data use and documentation." The updated work includes a targeted control strategy for advancement in supervisory cases. Full story