The California Privacy Protection Agency released draft rules on automated decision-making technologies, outlining how businesses using these systems must provide notice, opt-out options and access requirements to consumers. IAPP Staff Writer Caitlin Andrews breaks down the proposed rules and the CPPA Board's likely topics of discussion for its 8 Dec. meeting.
The Council of the European Union adopted the Data Act 27 Nov. Among several objectives, the act aims to promote fairness when allocating value from the use of data by actors in the digital economy and ease difficulties when switching between data processing providers.
The U.K. government announced amendments to the proposed Data Protection and Digital Information Bill (No. 2) that reflect a "raft of common-sense changes." U.K. Secretary of State for Science, Innovation and Technology Michelle Donelan said the amendments address "cracking down on cookies, scrapping pointless paperwork which stifles productivity, tackling benefit fraud (and) making it easier to protect our citizens from criminals." The U.K.
The Spanish Presidency of the Council of the European Union circulated half of the Artificial Intelligence Act provisions governing law enforcement's use of AI models within the Committee of Permanent Representatives 24 Nov., Euractiv reports. The remaining half, which focuses on issues such as use of foundation models, access to source code, system governance, and the sanction regime, is anticipated to be addressed by the committee 1 Dec.
The Office of the Australian Information Commissioner announced Carly Kind as privacy commissioner. Kind's appointment to the OAIC is a stand-alone position created under a new three-commissioner format, which includes separate commissioners for information, privacy and freedom of information. Kind's term begins 26 Feb. 2024.Full story
An unsealed complaint filed by 33 U.S. state attorneys general shows the depth of alleged children's privacy violations against Meta, The New York Times reports.
Spain's data protection authority, the Agencia Española de Protección de Datos, published guidance on the use of biometric data for work and personal purposes, noting employers must follow the EU General Data Protection Regulation regardless of employee consent.
Uruguay's Regulatory and Control Unit of Personal Data issued a resolution recognizing data protection adequacy to facilitate data transfers with South Korea and organizations participating in the EU-U.S. Data Privacy Framework.
New Zealand's Office of the Privacy Commissioner announced it will evaluate and draft a biometric privacy code in 2024. The OPC claimed the code will change how the Privacy Act applies to organizations that use biometric data and "allow for beneficial uses while safeguarding against privacy risk or harm."Full story
United Airlines may use consumer data to serve targeted ads on its mobile app or planes' entertainment systems, The Wall Street Journal reports. Passenger information such as flight history or United MileagePlus rewards could be used to target ads, however, consumers will have the option to opt out of data tracking.Full story