Companies that create connected devices will have to fix cyber vulnerabilities as soon as they become aware of them under the EU Cyber Resilience Act, which was finalized during the trilogue process 30 Nov., Euractiv reports.
The Parliament of Queensland, Australia, 29 Nov. passed the Information Privacy and Other Legislation Amendment Act 2023. The privacy reform will require organizations to notify victims and the Office of the Information Commissioner of a data breach. The mandatory notification "will prompt agencies to consider data security issues and will make them more proactive in preventing and managing data breaches." The privacy reform is expected to begin July 2025.Full story
We know there is a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you.
The IAPP AI Governance Center updated its "Key Terms for AI Governance" resource. The latest update adds eight new key terms while several existing definitions contained within the resource received minor updates. IAPP AI Governance Center Fellow Uzma Chaudhry detailed the changes.Full story
U.S. President Joe Biden's comprehensive artificial intelligence executive order was an initial step in addressing a generational challenge. While targeted toward U.S. government agencies, the order's requirements will have direct and indirect private-sector effects for years to come.
The European Consumer Organisation filed complaints with a "network" of member state consumer protection authorities alleging Meta engages in "unfair commercial practices in multiple ways." One of the purported unfair practices includes partially blocking Facebook and Instagram features for EU users until they choose either the ad-free subscription model or consent to receiving personalized advertising.
Euractiv reports a formal agreement around the Cyber Resilience Act could be reached 30 Nov., although key details such as how to deal with vulnerabilities and incident reporting still need to be settled. The proposal, if passed, would require manufactures of connected devices to include certain security measures into their products.Full story
The National Health Service England faces a lawsuit over its decision to create a large data-sharing platform, the Federated Data Platform, which allows providers to share information with the goal of improving care, the Guardian reports.
The Quantum Hub and Young Leaders for Active Citizenship released a paper examining the children's privacy and parental consent landscape under India's Digital Personal Data Protection Act, APN News reports.