A sensitive health data breach through hacks of file transfer service MOVEit affected at least three U.S. states, TechCrunch reports. Colorado's Department of Health Care Policy and Financing reported hackers accessed its database of 4.1 million individuals while third-party data management firm PH Tech confirmed 1.7 million Oregonians had their information exposed through MOVEit.
Reuters reports a federal class-action lawsuit filed against Orrick, Herrington & Sutcliffe alleges damages from a March data breach of 152,818 people. The suit claims the breach of personally identifiable information led to spam calls that included the sensitive information. Claimants called the firm's two-year identity monitoring plan following the breach "woefully inadequate."Full story
The Czech Republic's data protection authority, Úřad pro ochranu osobních údajů, is assessing the use of facial recognition technology by local police, Novinky reports. The DPA requested information from police, including technical documents and explanations of the tech used on a trial basis for nearly a year. UOOU spokesman Milan Řepka said police did not consult the DPA prior to implementing the trial.Full story
The Indian Express reports India's Digital Personal Data Protection Act received presidential assent and was published in the Gazette of India. Minister of State for Electronics and Information Technology Rajeev Chandrasekhar spoke with The Indian Express regarding the law, its scope and application, and enforcement.
Kenya's Office of the Data Privacy Commissioner claims cryptocurrency provider Worldcoin breached Section 25 of the Data Protection Act, Citizen Digital reports. The ODPC's ongoing investigation into Worldcoin's biometric data collection brought a 60-day halt to data processing and a review into the company's legal basis for processing.
The Colorado attorney general's office posted additional compliance resources to its Colorado Privacy Act webpage. The office compiled FAQs on general CPA information, impacts the law will have on covered entities and details on how enforcement will be carried out. Examples of guidance letters sent to covered entities 12 July are also posted. The CPA took force 1 July.Full story
Jamie Barnard, CEO of privacy compliance vendor Compliant, discussed with AdExchanger how the advertising technology industry is "easy pickings" for global privacy authorities.
The U.S. White House's Office of the National Cyber Director, in coordination with the Cybersecurity and Infrastructure Security Agency, the National Science Foundation, the Defense Advanced Research Projects Agency and the Office of Management and Budget, published a request for information on the cybersecurity of open source software, The Record reports.
Amazon plans to launch a palm-scanning service called Amazon One by the end of the year, The Wall Street Journal reports. Currently being used in retailers in nine U.S. airports and 13 sports arenas, the company plans to use the technology for payment at its Amazon Fresh grocery and Whole Foods stores in the U.S., as well as some Panera and Starbucks locations.