The U.K. Information Commissioner's Office and Competition and Markets Authority jointly recommended businesses "stop using harmful website designs" to "trick consumers into giving up more of their personal data" than they would otherwise. The agencies issued a joint position paper highlighting how design practices could breach data protection laws.
The U.S. National Institute of Standards and Technology released a public draft of its Cybersecurity Framework 2.0. The agency is seeking feedback on whether the draft "addresses organizations' current and anticipated future cybersecurity challenges, is aligned with leading practices and guidance resources, and reflects comments received so far." The deadline for comments is 4 Nov.
The Cyberspace Administration of China published draft rules requiring service providers that maintain data on more than 1 million people to perform annual compliance audits, Reuters reports. These reviews, to be conducted by a CAC-appointed agency, must also evaluate services with data of more than 100,000 users or sensitive data of more than 10,000 users.
The Information Technology and Innovation Foundation's Associate Director, Trade Policy, Nigel Cory said G7 countries should develop "tangible and pragmatic" approaches to global data governance.
Argentina's Agency for Access to Public Information opened a probe into biometric information collection practices of cryptocurrency provider Worldcoin.
In a piece for The New York Times' Tech Fix, Brian Chen breaks down how privacy practices of decades-old mobile apps are falling behind in the modern digital landscape. Chen used mobile payment app Venmo as an example, opining the 15-year-old app still functions in a way where publicly available transaction data "could be used to study your movements or ...
The Hill reports Georgia state lawmakers will raise a bill to address children's online safety during the 2024 legislative session. Lieutenant Gov. Burt Jones and state Sen.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, and Director of Research and Insights Joe Jones produced an infographic outlining steps for data transfers to the U.S. from European jurisdictions under the new EU-U.S. Data Privacy Framework. The resource covers entities that were previously enrolled in the EU-U.S. Privacy Shield, organizations newly enrolling in the DPF and U.S.
Finland's Office of the Data Protection Ombudsman ordered the parent companies of the Yango taxi service to temporarily suspend transfers of customer data to Russia in response to a new Russian law that will allow security services to obtain passenger data.
U.S. senators are grappling with the unresolved debate over consumer privacy law reform in the wake of new generative artificial intelligence technologies, Wired reports. Some lawmakers believe any privacy restrictions imposed on the development of AI could weaken the U.S. in the race to lead control of the technology.