Italy's data protection authority, the Garante, gave MG Freesites, the company that manages adult entertainment platform Pornhub, 20 days to clarify its user profiling and tracking systems. It also asked the company to indicate its legal basis for data processing, the type of data collected, methods for obtaining consent, whether data is sent to third parties, and any measures taken to verify the age of users.
The U.S. Federal Communications Commission Privacy and Data Protection Task Force proposed rules to protect consumers from scammers targeting data and personal information through cellphone SIM card swapping and port-out fraud. "Every consumer has a right to expect that their mobile phone service providers keep their accounts secure and their data private," FCC Chair Jessica Rosenworcel said.Full story
A report filed by members of U.S. Congress alleges tax preparation companies mishandled sensitive financial information of U.S. taxpayers, CNN reports. Lawmakers called the allegations against companies including TaxSlayer, H&R Block and TaxAct a "five-alarm fire" as website tracking filtered personal information on tens of millions to Google, Meta and other Big Tech companies.
France's data protection authority, the Commission nationale de l'informatique et des libertés, launched a new economic analysis team to promote a better understanding of the data protection ecosystem and the regulations by which it operates.
Telehealth and discount prescription drug provider GoodRx filed with U.S. District Court for the Northern District of California for dismissal of a class-action privacy lawsuit alleging health data mishandling, MediaPost reports. The suit, which includes Criteo, Google and Meta, stems from an enforcement action from the U.S. Federal Trade Commission in February.
Uplevel founder and CEO Raashee Gupta Erry, CIPP/US, CIPM, outlined how the U.S. health care privacy landscape is being reshaped by recent state-level legislation and enforcement actions for Lucid Privacy.
The IAPP published the "Defining Privacy Engineering" chart, which provides a broad definition of privacy engineering and highlights domains in which privacy engineers can significantly impact privacy protections. The chart is intended to deepen the understanding of, and collaboration within, the privacy engineering field. Full story
Euractiv reports EU policymakers will agree to provisions on innovation measures in the proposed Artificial Intelligence Act during the next trilogue session 18 July.
South Africa's Information Regulator issued a ZAR5 million fine to the Department of Justice and Constitutional Development for failing to comply with an enforcement notice issued by the agency after allegedly circumventing elements of the Protection of Personal Information Act.