Approximately 1.3 million people in Maine may have had their personal information compromised after the data transfer software MOVEit was hit by a Russian ransomware attack. The state says it has patched the breach and is offering free credit monitoring to those who were affected. Residents can call a hotline to see what data was compromised.Full story
Reporting obligations and critical products are two remaining points of contention for stakeholders as negotiations around the Cyber Resilience Act enter the final stages, Euractiv reports. Parties are divided on whether oversight of reported security incidents should lie with the EU Agency for Cybersecurity or EU Computer Security Incident Response Teams.
We know there is a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you.
Australian Information Commissioner Angelene Falk announced she will end her commissioner tenure in August 2024. Falk, who was appointed in 2018, said she will "remain focused on the protection and promotion of privacy and information access rights and ensuring the OAIC is well positioned for the challenges of the future."Full story
The U.S. Federal Trade Commission announced it will reveal a voice cloning challenge at its 16 Nov. open meeting.
The IAPP published the IAPP-EY Privacy Governance Report 2023, which builds on previous comprehensive efforts to shine a light on the location, performance and significance of privacy governance within organizations. Research focused on governance and organizational structures, privacy strategy and planning, compensation and budget management, and performance metrics and monitoring.
European Parliament endorsed the data-sharing provisions of the EU Data Act. The law's objective is to encourage innovation through the curtailment of barriers for accessing data in the context of Internet of Things devices and for training artificial intelligence systems' algorithms. The Data Act awaits Council of the European Union approval before entering into law.Full story
European Parliament co-rapporteurs for the proposed EU Artificial Intelligence Act drafted reactions to the Council of the European Union's proposals for characterizing "high-impact" AI models, Euractiv reports. The reaction from Dragoș Tudorache and Brando Benifei included four preliminary criteria containing firm thresholds for application. The proposal was expected to be addressed at a 9 Nov.
Ahead of anticipated discussion at its 8 Dec. open meeting, the California Privacy Protection Agency Board released a revised draft of the agency's California Privacy Rights Act regulations for cybersecurity audits. The initial draft was released in August with draft risk assessment regulations.
According to "The King's Speech" to U.K. Parliament, ministers will reintroduce the Data Protection and Digital Information Bill (No. 2). Some provisions would allow businesses to protect personal data in more "proportionate and practical ways" compared to EU General Data Protection Regulation requirements.