On 10 July, the final pieces fell into place to create a new lawful basis for transferring personal data from the EU to the U.S., implementing the EU-U.S. Data Privacy Framework. Chair of Law and Ethics at the Georgia Tech School of Cybersecurity and Privacy Peter Swire, CIPP/US, explores what he called an "essential element of putting the DPF into operation," U.S.
The Biden administration announced the "U.S. Cyber Trust Mark" program. Under the cybersecurity labeling program for smart devices, anticipated to launch in 2024, consumers will find a logo on products meeting established criteria published by the National Institute of Standards and Technology.
The Dutch contractor managing Mali's .ML domain raised alarm bells with U.S. national security officials that millions of its military's emails were misdirected to Mali through "typo leaks" for more than a decade, the Financial Times reports. Johannes Zuurbier, an internet entrepreneur from The Netherlands, had a contract with the Mali government to manage its .ML domain, but it reverted back to the Russian-aligned government's control when the agreement expired 17 July. Zuurbier repeatedly warned U.S.
Italy's data protection authority, the Garante, issued multiple fines to several entities for illegal data processing and marketing activities.
The EU Committee of Permanent Representatives is set to adopt the EU Council of Ministers' position on the revised Cyber Resilience Act Wednesday, following new text circulated by the Spanish presidency, Euractiv reports.
European Commissioner for Justice Didier Reynders and U.S.
The U.K. Information Commissioner's Office published a recap of the formal reprimands it issued in the second quarter of 2023. The ICO included guidance for organizations to avoid similar data protection issues that could lead to an ICO reprimand.
Data for more than 260,000 dating app accounts and 340GB of images and private chats were left exposed in an Amazon Web Services S3 storage bucket, SC Media reports. Canadian and U.S. users of the 419 Dating — Chat & Flirt app from Siling App were the most affected and users' email addresses were also exposed.Full story
Norway's data protection authority, Datatilsynet, is placing a three-month ban on surveillance-based behavioral advertising by Facebook and Instagram, effective 4 Aug. The DPA, which said it believes parent company Meta's profiling practices "are illegal," will impose a fine of NOK1 million per day if the company does not comply.
The IAPP updated its "EU-US Data Privacy Framework — Guidance and Resources" page in the IAPP Resource Center. The page includes the latest documents and announcements on the new framework, adopted 10 July, as well as analysis and additional resources, including what comes next as the DPF takes effect.