As part of its 25th anniversary, the IAPP will celebrate 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week, we highlight the evolution and proliferation of data breaches from the early 2000s to today.Full story
A U.S. House Committee on Energy and Commerce subcommittee hearing 26 March seesawed between discussions on the path forward for children's online safety bills and the recent removal of Democratic Federal Trade Commissioners. IAPP News Editor Joe Duball reports on the lawmakers' dialogue and comments from former Federal Trade Commissioner Rebecca Kelly Slaughter, who was called to testify before the subcommittee.Full story
Organizations looking to train AI technology must ensure the data it uses is fully anonymized and meets data protection obligations. UKG's Roy Kamp, AIGP, CIPP/E, CIPP/US, CIPM, FIP, and Noémie Weinbaum, AIGP, CIPP/E, CIPP/US, CIPM, CDPO/FR, FIP, wrote the "future of AI governance may depend on finding a middle ground — one that acknowledges the limitations of traditional anonymization while upholding strong ethical safeguards." Full story
The Office of the Privacy Commissioner of Canada released a data breach self-assessment tool to help organizations better respond to data breaches.
Court of Justice of the European Union Advocate General Tamara Ćapeta issued a nonbinding opinion in favor of Meta's ability to appeal to a national court regarding its 225 million euro WhatsApp fine from Ireland's Data Protection Commission following intervention by the European Data Protection Board, Reuters reports.
The U.K. Information Commissioner's Office issued a 3.07 million GBP fine to a company that provides software service to the National Health Service and other health care entities for its actions that led to a ransomware attack. In 2022, a subsidiary of Advanced Computer Software Group was breached by hackers via a customer account that did not have multifactor authentication and led to 79,404 people having their personal information stolen.
Gov. Spencer Cox, R-Utah, signed the App Store Accountability Act into law, which is slated to enter into force 7 May, CNBC reports. The law requires app store providers, such as Apple and Google, to verify a user's age and require parental consent to use certain apps and make in-app purchases for users under age 18.
France's data protection authority, the Commission nationale de l'informatique et des libertés, outlined the "soft law" projects it will address in 2025. It included AI, benchmarking subcontractor evaluations, in-car cameras and political prospecting among the areas it will develop guidance and recommendations.Full story
Axios reports on the increased interest in using agentic AI in the cybersecurity field. The report argued generative AI can help address the dearth of workers in the field, but noted an error by AI that human oversight may have caught can otherwise leave a system vulnerable to attacks.Full story
The Hill reports Signal President Meredith Whittaker defended the app's security features after a reporter was included in a Signal group chat with U.S. officials that discussed confidential information. Whittaker said the app is "open source, nonprofit, and we develop and apply (end-to-end encryption) and privacy preserving tech across our system to protect metadata and message contents."Full story