A study by Consumer Reports and The Markup found that, on average, 2,230 companies shared consumer data on each participant with Facebook. Using a panel of 709 volunteers, the research examined server-to-server data sharing and found information such as email addresses and mobile advertising identification were shared with Meta. CR also called for the U.S.
The U.K. Information Commissioner's Office opened the first in a series of public consultations on generative artificial intelligence. The first consultation will explore the legality around training generative AI models on personal data scraped from the internet. The ICO will solicit views from developers, users and civil society groups.
U.S. Sen. Maria Cantwell, D-Wash., is anticipated to introduce a series of bipartisan bills that would regulate a range of artificial intelligence-related issues in the coming months, FedScoop reports. The initiatives would target AI concerns, such as deepfakes, jobs and training, algorithmic bias, digital privacy, national security, and AI innovation and competitiveness.
Denmark's data protection authority, Datatilsynet, laid out its priorities for 2024, with topics involving artificial intelligence and automation use, employee monitoring, data subject's right of access and more.
The EU Data Act is now in force. The legislation attempts to ensure fairness in the data economy by creating a competitive data market and offering legal clarity surrounding the use of certain types of data. The Data Act empowers users of connected devices to assume greater control of the data the devices produce and gives public sector entities greater access to private sector data to respond to public crises, in part. The law becomes applicable 12 Sept.
Spain's data protection authority, the Agencia Española de Protección de Datos, released its newest guidelines for how to treat analytics and cookies. The guidance allows for some cookies to bypass user consent, but advises notices of the exemption, as well as limits to cookie lifespan and data storage length. Data also cannot be matched with other processors.Full story
The European Commission released a report 15 Jan. highlighting its review and subsequent reaffirmation of 11 data protection adequacy agreements under the EU General Data Protection Regulation. The Commission found data protection standards of adequacy partners largely remained equivalent to the GDPR or countries moved even closer to EU standards.
A series of class-action lawsuits in California aimed at the use of so-called "pen register devices" could be the next frontier for online privacy fights, Bloomberg Law reports. The devices, which record dialing and routing information, can allegedly be used to monitor a user's activity and help identify personal information.
Multifactor authentication could help prevent data breaches on social media accounts, The Wall Street Journal reports. The push to activate the security measure comes after the U.S.
Attorneys representing YouTube users asked the U.S. District Court for the Northern District of California to proceed with a 2019 children's privacy lawsuit, MediaPost reports. The lawsuit claimed YouTube, Cartoon Network, DreamWorks and others used children's data for targeted advertising without parental consent.