Applications are open for the IAPP Privacy Innovation Award 2023. The award highlights new products, processes and services used to enhance the privacy of consumer, citizen, supplier and/or employee data. Two winners will be selected from the combined regions of Africa, Asia, Europe and Middle East, with the other winner chosen from the combined regions of North America and Latin America. Applications are due 21 Sept.Full story
The U.S. National Institute of Standards and Technology said a final version of its draft cybersecurity guidance related to the Health Insurance Portability and Accountability Act Security Rule will be published later this year. The version will include more specific resources for small entities and clarity on certain terms like "risk analysis" and "risk assessment." Full story
Following a legal analysis of U.S. state privacy laws, enforcement actions and related guidance, the Network Advertising Initiative recommends digital advertising companies determine how "rules governing the collection, disclosure and receipt of sensitive health information" apply to their organizations.
Bloomberg Law reports U.S. state legislatures are planning to introduce or re-introduce children's online safety bills when 2024 legislative sessions commence. Maryland and Minnesota are among the states prepared to bring back bills focused on children's privacy while other states may look to mirror the California Age-Appropriate Design Code Act.
The European Commission appointed Didier Reynders and Věra Jourová to interim digital leadership roles, Politico reports. Reynders will assume the competition commissioner post while Jourová becomes executive vice president of the commission's digital portfolio. The interim appointments come as Margrethe Vestager takes a leave of absence to pursue the presidency of the European Investment Bank.Full story
A study by nonprofit Mozilla Foundation shed light on potential issues with car manufacturers' data practices, The Associated Press reports. The survey of 25 major manufacturers showed a majority are potentially selling off consumers' personal data and would fulfill law enforcement requests for data without a warrant. Editor's note: The IAPP's Cobun Zweifel-Keegan, CIPP/US, CIPM, recently discussed privacy compliance in the U.S.
The U.S. Cybersecurity and Infrastructure Security Agency released its voluntary pledge for security by design among primary and secondary education technology providers. The pledge focuses on provider ownership over security, transparency and accountability principles, and appointment of an implementation point person.Full story
Meta is exploring subscription-based versions of Facebook and Instagram without advertisements for EU users, The New York Times reports. Meta would continue to offer its free versions of the platforms with ads in the EU, however, the cost of the new ad-free service and when it may debut is currently unknown.
India's Minister of State for Electronics and Information Technology Rajeev Chandrasekhar said the government may give the tech industry approximately six months to comply with the Digital Personal Data Protection Act, The Economic Times of India reports.
South Korea's Personal Information Protection Commission issued a KRW8 billion fine to telecommunications company LG Uplus following a data breach of nearly 300,000 records containing personal information.