By 2026, 13 U.S. states will have comprehensive consumer privacy laws in effect, BSA Policy Director Olga Medina, CIPP/US, writes. She explained how Virginia's comprehensive privacy law is the model for the majority of those laws and each statute reflects "nearly universal agreement" that consumers should be able to control their personal data.Full story
In an op-ed for VentureBeat, EdenBase co-founder Daniel Doll-Steinberg writes industry leaders need to understand security issues around quantum computing and "take action to resolve the issues that will arise when this powerful technology surfaces." Doll-Steinberg said advances in quantum technology suggest "breakthroughs could occur at any time." He said, "as we harness the potential of quantum computing, it is likely to be the most impactful of all frontier technologies, driving significant advancements in our society."
The Atlantic's Charlie Warzel writes about digital privacy in a world of vast data collection and harvesting. "Once our information has been collected, it ricochets around a labyrinthine ad-tech ecosystem made up of thousands of companies that offer to make sense of, and serve hyper-targeted ads based on, it," he said. "Our privacy is what the internet eats to live."Full story
The U.S. National Institute of Standards and Technology will hold a two-day workshop, 19-20 Sept., as part of the process to update its Cybersecurity Framework. NIST staff and expert panels will address attendees who will have an opportunity to discuss the draft Cybersecurity Framework 2.0.
The Office of the U.S. National Coordinator for Health Information Technology and the Department of Health and Human Services' Office for Civil Rights updated their Security Risk Assessment Tool for Health Insurance Portability and Accountability Act compliance.
U.S. Customs and Border Patrol told U.S. Sen. Ron Wyden, D-Ore., it will stop buying mobile device location data at the end of September, 404 Media reports. While there was no explanation for the halt, Wyden said CBP's decision is "good news" but wants further information on why CBP was given "authority to engage in such warrantless surveillance in the first place."Full story
The Financial Times reports the European Court of Human Rights ruled the privacy of two individuals was breached by a U.K. foreign surveillance operation. The ECHR supported arguments by complainants that their privacy was violated by mass surveillance of communications data carried out by the U.K. Government Communications Headquarters. The court referred to a broader 2021 ruling against U.K. surveillance practices.Full story
Ongoing conflicts between information technology asset management and asset disposition hide "regulatory noncompliance," Privata Vox Principal Advocate Robert Johnson, CIPP/US, writes. As a result, large organizations may need to dispose of tens of thousands of employee-issued devices each year.
The U.K. government's Department for Science, Innovation and Technology published a statutory instrument that amends language for "fundamental rights and freedoms" in U.K. data protection laws. The instrument updates references that were retained under the EU General Data Protection Regulation to instead reflect recognitions enshrined in U.K. law.
The Delaware Personal Data Privacy Act was signed by Gov. John Carney, D-Del., and will go into effect 1 Jan. 2025, Delaware Public Media reports. An outreach period to inform consumers and businesses will begin no later than 1 July 2024.