The European Parliament approved an agreement to allow secure passenger name record data, including individuals' travel and contact information, to be shared between the EU and Canada.
Luxembourg's National Commission for Data Protection issued a reminder about the importance of user consent when used as a legal basis for processing under the EU General Data Protection Regulation. The CNPD's updated information specifies "under what conditions consent can be considered valid" under the GDPR.Full story
The European Commission released the third draft of the general-purpose AI Code of Practice with 16 additional safety and security commitments related to AI models with systemic risks. The final draft is expected to be ready in May after the working group receives another round of feedback.Full story
Two recent legal reforms in Mexico may have a significant impact on the country's data protection enforcement regime, Basham, Ringe y Correa, S.C.'s Data Protection and IT Associate Renata Denisse Bueron Valenzuela and Data Protection Associate Ivan Garcia Argueta write.
The Network Advertising Initiative announced the launch of its Self-Regulatory Framework, which is intended to serve as a model for digital advertisers to self-regulate and comply with U.S. state and federal privacy regulations.
California Attorney General Rob Bonta issued California Consumer Privacy Act compliance letters concerning geolocation data sales. Bonta said the letters, sent to covered entities across various industries, requested additional information related to recipients' business activities while notifying them of a potential CCPA violation.Full story
New York Attorney General Letitia James filed a lawsuit against National General and Allstate, claiming the insurance companies had insufficient data protection practices when they sustained two data breaches affecting customers' personal data. James' office alleged the companies failed to notify consumers of the first breach and did not investigate if sensitive information was impacted.
Belgium's Data Protection Authority is seeking feedback on its updated guidance on direct marketing practices. The update is accompanied by a data protection checklist to ensure marketing campaigns align with the EU General Data Protection Regulation.
The U.S. Federal Trade Commission reported consumers lost USD12.5 billion to fraud in 2024, a 25% increase compared to 2023. The agency said imposter scams, online shopping issues, and business and job opportunities were the top three categories of fraud.Full story
The American Psychological Association's Council of Representatives approved new policies to protect individuals' psychological and neural data collected by consumer devices. The safeguards aim to address "the need for ethical collection, storage and use of data gathered from direct-to-consumer software and wearable devices."Full story