The Digital Advertising Alliance published best practices for applying its self-regulatory principles to connected devices, MediaPost reports. The guidance recommends first-party companies notify consumers of data collection through a "clear, meaningful, and prominent link," and offer them the choice to opt-out. It also encourages third-party companies to offer consumers notice and an opportunity to opt-out.
Members of the U.S. Senate and the House introduced companion bills aimed at limiting data brokers from selling or sharing U.S. personal data internationally. The proposal sets up potential stipulations on data exports based on the U.S. Department of Commerce's categorization of low- and high-risk countries. The bill carries an exemption for "data encrypted with (U.S.
A ransomware group accessed data belonging to the law firm HWL Ebsworth, of which the Office of the Australian Information Commissioner is a client, ChannelNews reports. The OAIC said data provided to the firm has been compromised, but said its own systems have not.
Spain's data protection authority, the Agencia Española de Protección de Datos, launched a redesigned version of its Gestiona tool which supports entities with risk management and conducting impact assessments under the EU General Data Protection Regulation.
Informatica, an enterprise-level data sharing and analysis tool developer, acquired U.K. startup Privitar, which builds data access controls, TechCrunch reports. Informatica's acquisition will inset Privitar's solutions within its data stack as a "intelligent data management cloud." Terms of Informatica's purchase were not disclosed.
Former Facebook data scientist Francis Haugen wrote in her new book that social media companies are still not being held accountable for the harms they cause users, especially young people, after previously leaking internal company research in 2021, CBS News reports.
Members of ClubCISO found multinational organizations increased their cyber resiliency over the last year with 76% of members "reporting no material breaches," InfoSecurity Magazine reports, citing figures from the Telstra Purple's annual "Information Security Maturity" report. Last year, 68% of ClubCISO members reported they did not suffer a material breach.
The EU is on its way to finalizing the world's first regulation of artificial intelligence as the European Parliament voted Wednesday to adopt a common position on the proposed AI Act. The approval moves the framework to EU trilogue negotiations between Parliament, the Council of the European Union and the European Commission. IAPP Editorial Director Jedidiah Bracy, CIPP, reports on the position members of Parliament arrived at and reactions from Brussels.
The U.K. Information Commissioner's Office published its mandated review and post-transition impressions of the Children's Code.
President Bola Tinubu signed the Nigeria Data Protection Bill, 2023 into law 14 June, ITEdge Nigeria reports. The law creates the Nigeria Data Protection Commission headed by a national commissioner tasked with regulating how entities process personal information.