The European Commission released a Q&A document covering artificial intelligence use and development under the AI Act. The document outlines how the new legal framework will apply to both public and private entities using an AI system within or outside the EU that affects its citizens.
Multiple U.S. pharmacy chains were found to turn over customer prescription data to law enforcement without a search warrant, The Washington Post reports. The information was obtained through a letter from Democratic members of U.S. Congress to U.S. Department of Health and Human Services Secretary Xavier Becerra.
Cyberite's Martin Gomberg, CIPP/E, explores the intricacies of how DNA data should be considered with a data privacy lens. He opines such information is often used to determine ancestry or familial health history, which connects it with other people's own information. "But privacy laws do not handle the interrelatedness of individuals well," he writes.Full story
The U.K. Information Commissioner's Office released two draft pieces of guidance related to how businesses should keep records in regard to worker information and data related to recruitment and selection. Public comment on both items closes 5 March 2024.Full story
Norway's data protection authority, Datatilsynet, announced it imposed an NOK10 million fine against fitness club SATS for allegedly violating the EU General Data Protection Regulation. SATS allegedly breached GDPR provisions for data subject rights to access and erasure, as Datatilsynet received "several complaints" between 2018-2021.Full story
The U.S. Department of Health and Human Services adopted finalized rules concerning algorithm transparency and information technology interoperability among health care providers.
The Guardian reports nonprofit National Center for Missing & Exploited Children said Meta's end-to-end encrypted messaging could be a "devastating blow" to child safety and privacy protections. Meta claims users can report behavior that violates the company's social media guidelines, while using end-to-end encryption to protect personal privacy.Full story
Poland's data protection authority, Urząd Ochrony Danych Osobowych, approved the Polish Hospital Federation's code of conduct for the health care sector. The code allows public hospitals to confirm data processing compliance with the EU General Data Protection Regulation.Full story
The U.S. Senate voted 59-40 to confirm Harry Coker as national cyber director, NextGov reports. Coker, who replaces Chris Inglis following his retirement in February, spoke in support of the Cybersecurity and Infrastructure Security Agency's secure-by-design initiative. He said the initiative must help "ensure that it's not just a focus on first-to-market. It needs to be secure-to-market."Full story
Apple rolled out a policy change on disclosing user push notification data to law enforcement, Reuters reports. The company will now disclose only when served a court order to do so, joining a policy position adopted by Google.