The Court of Justice of the European Union's targeted advertising decision against Meta included clearly defined requirements for data minimization under the EU General Data Protection Regulation. Ananos Co-CEO and General Counsel Gary LaFever opines the decision could serve as a jumping off point in EU trilogue negotiations for the proposed Artificial Intelligence Act.
The worldwide generative artificial intelligence boom runs parallel with a growing network of privacy legislation around the world. This collision is of great interest to employers who manage sensitive employee data and, subsequently, risk legal noncompliance as they deploy generative AI tools. Littler Mendelson Shareholder Zoe Argento, CIPP/US, outlines three key areas to bear in mind within the balancing act.Full story
Israel's Privacy Protection Authority issued instructions for lawful data transfers from the European Economic Area for 2023-2025. The instructions contain four main requirements, including the obligations to delete personal information, to limit the retention of unnecessary information and to be accurate.Full story
India's Ministry of Electronics and Information Technology released an overview of the Digital Personal Data Protection Bill's "salient features," including data fiduciary obligations, data subject rights, grounding principals and innovative features. The DPDPB cleared Indian Parliament 9 Aug.
China's National Information Security Standardization Technical Committee is requesting comments on a draft cybersecurity national standard, the Information Security Technology Security Requirements for the Handling of Sensitive Personal Information. The draft defines categories of sensitive personal information, data identification and security requirements for processing, while noting the data should be processed for a specific purpose and with individual's consent.
The U.S. Defense Advanced Research Projects Agency announced the two-year AI Cyber Challenge competition, Nextgov reports. Leading software companies will compete for USD20 million in prizes, developing code to protect digital networks of nationwide critical infrastructures.
U.K. Secretary of State for Science, Innovation and Technology Michelle Donelan pushed back against Big Tech claims that the proposed Online Safety Bill will breach users' privacy, Reuters reports. Donelan said she is a proponent for privacy, but breaking end-to-end encryption to fight child exploitation is an exception.
The U.S. Federal Trade Commission's public comment period on its Notice of Proposed Rulemaking to amend the Health Breach Notification Rule closed 9 Aug. Politico reports on the substance of the comments submitted.
India's upper house of Parliament, the Rajya Sabha, passed the Digital Personal Data Protection Bill 9 Aug., following the Lok Sabha's prior approval of the legislation, MoneyControl News reports. The bill awaits President Draupadi Murmu's assent. The original bill, introduced in 2018 and tabled in 2019, was ultimately withdrawn by the government in 2022 and reintroduced as the DPDP.
The Dubai International Financial Centre announced an adequacy decision concerning essential equivalence between the California Consumer Privacy Act and Dubai's Data Protection Law 2020.