Euronews reports only two countries, Belgium and Croatia, have informed the European Commission about their transposition of updated EU cybersecurity rules. The implementation deadline for the Network and Information Security Directive 2, which is meant to improve cybersecurity infrastructure across the bloc, is 17 Oct.
U.S. regulators raised concerns over health care organizations' use of third-party tools and potential privacy issues that may take place when sensitive data is tracked by providers and third parties. Baker McKenzie Partners Helena Engfeldt, CIPP/E, CIPP/US, and Rachel Ehlers broke down the latest efforts to protect health privacy and how companies can enlist safeguards when processing health information. Full story
Part eight of an ongoing series examining the operational impacts of the EU AI Act looks at Chapter IX's provisions around post-market monitoring, information sharing and enforcement. Bird & Bird's Shima Abbady and Puck van den Bosch look at what will need to be done for compliance and how to report serious incidents in a fragmented regulatory landscape. Full story
U.N. Ambassador Deborah McCarthy, who is the lead U.S. negotiator of the U.N. Cybercrime Negotiations, claimed the U.S. could face backlash if it chooses not to support the U.N.'s cybercrime treaty, Digital Watch Observatory reports.
Guernsey Data Protection Commissioner Brent Homan detailed efforts by the DPA and Health Improvement Commission to protect children's health information during the use of health care technology.
In a profile of U.S. Federal Trade Commissioner Chair Lina Khan, Bloomberg reports on some of her standout cases and examines what she might do with a second term. Khan has especially riled some big companies that have sought to complete mergers in recent years.Full story
Reuters reports that social platform X will not fall under the EU Digital Markets Act's gatekeeper rules following a European Commission investigation. X allegedly said it does not serve as "an important gateway between businesses and consumers," and should not have to meet the DMA's obligations. Full story
A Bloomberg Law column examines the ramifications of various website tracking lawsuits, in light of a recent one against the mental-health services company Therapymatch under the California Invasion of Privacy Act and California Consumer Privacy Act.
AI machine learning tools that have access to the internet could expose sensitive training data, 404 Media reports. Tools that are misconfigured or have vulnerabilities may allow "unauthorized individuals to access, download, or even run sensitive ML models and datasets," Reddit Senior Security Engineer Charan Akiri said.Full story
The European Commission issued its one-year report reviewing the progress U.S. authorities have made in implementing the requirements of the EU-U.S. Data Privacy Framework. The report addresses the operational steps undertaken by U.S. regulatory agencies, such as the Department of Commerce and the Federal Trade Commission to meet DPF requirements, as well as measures adopted by the U.S. intelligence and national security community to build out the redress mechanisms for EU citizens.