In an op-ed for AdExchanger, Alliant Chief Innovation Officer Donna Hamilton discusses why data clean rooms "are not the be-all and end-all" solution to balancing privacy compliance and data sharing. Hamilton offered a rundown of factors advertisers and marketers should consider regarding their business and compliance needs before landing on clean rooms, including purpose limitation and certified compliance tactics.
Personal information belonging to approximately 193,000 Pizza Hut Australia customers was potentially swept up in a cyberattack, the Guardian reports. Names, addresses and home delivery instructions, email addresses and phone numbers were among the data potentially accessed.
The U.S. District Court for the Northern District of California granted a preliminary injunction against the California Age-Appropriate Design Code Act, The Washington Post reports.
Should the California Delete Act be signed into law by Gov. Gavin Newsom, D-Calif., it will create a mechanism for consumers to make a one-time deletion request of all their information aggregated by registered data brokers operating in the state. Join the IAPP for a LinkedIn Live discussion 21 Sept., covering the proposed law's privacy impacts, requirements for data brokers and general enforcement.
Legislation introduced by U.S. lawmakers would ban advertising networks from using personal data for targeted advertising. The Banning Surveillance Advertising Act would allow contextual and targeted ads based on a broad location. It would not allow targeted ads based on protected class and personal data purchased from data brokers. "We should not have to choose between using the internet and sacrificing our most personal and sensitive data," said co-sponsor Sen.
The U.S. Federal Trade Commission warned five tax preparation companies they risk civil penalties for allegedly using consumers' confidential data for purposes unrelated to tax preparation without consent. In a "Notice of Penalty Offenses," the FTC said companies could face civil penalties of up to USD50,120 per violation.
The U.S. Department of Justice Office of Privacy and Civil Liberties added the U.K. as a qualified jurisdiction, whose citizens can seek legal redress under the EU-U.S. Data Privacy Framework's Data Protection Review Court. U.K. citizens will be eligible to petition the redress mechanisms once the proposed U.K.-U.S.
Analysis published by New York University's Stern Center for Business and Human Rights urges increased consideration for metaverse-related privacy, The Record reports. The NYU study discusses how the mass quantity of personal and bodily data required to power the metaverse raises privacy risks.
Reuters reports BNSF Railway reached an undisclosed settlement over Illinois Biometric Information Privacy Act claims. The rail operator's deal with plaintiffs comes after a federal court decision in July to vacate USD228 million in damages, which were slated to be the first to be awarded under the BIPA. BNSF was due for a jury trial 2 Oct.