Montana's comprehensive privacy law took force 1 Oct., The Bozeman Daily Chronicle reports. Data subject access rights, required risk assessments, purpose and processing limitations, and a 60-day cure period are among the provisions now effective while required recognition of universal opt-out signals takes effect 1 Jan. 2025. Editor's note: Explore this IAPP tracker on key dates for U.S.
The European Commission released nonbinding guidelines to help industry and member states "understand the provisions and reap the benefits" of the Data Governance Act. The guide is available in 24 different languages and will be updated periodically as the European Data Innovation Board gains experience implementing and enforcing the law.Full story
Estonia's Data Protection Inspectorate encouraged parents and children to have a dialogue about instances when it is acceptable for parents to post photos of their children on social media. The DPI recommended parents educate their children to seek consent when they would like to take a photo of someone with a smart device and what is reasonable to share on the internet.Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, published an analysis of the protective measures around minors' privacy and safety online. The analysis explores strategies for a range of children's online safety scenarios, including safeguards against inappropriate content, child-safe website designs and consensual data processing.Full story
The use of AI assistants to track and transcribe meetings could have implications for employees' privacy, The Washington Post reports. With the potential of collecting employees' sensitive personal data or communications, privacy researcher Naomi Brockwell said "people haven't really internalized how invasive" AI assistants can be while the technology is "proliferating so fast."Full story
The year 2024 proved to be another robust one for emerging U.S. state privacy law. Unlike previous years, however, 2024 underwent a paradigm shift away from the standard framework influenced by the draft Washington State Privacy Act. For the Future of Privacy Forum's Keir Lamont, CIPP/US, and Husch Blackwell's David Stauss, CIPP/E, CIPP/US, CIPT, FIP, PLS, 2024 marked the end of what Lamont calls the "Pax Washingtonia" era for state privacy law. IAPP Editorial Director Jedidiah Bracy caught up with Lamont and Stauss to discuss this busy year in state privacy law at IAPP Privacy. Security.
The U.S. Federal Communications Commission entered a settlement with T-Mobile following "significant data breaches" that affected millions of customers. Per the settlement, the mobile carrier will invest USD15.75 million in cybersecurity upgrades and pay a USD15.75 million fine to the FCC.
The Data Protection Authority of Sri Lanka posted draft regulations on personal data protection impact assessments for public consultation. Stakeholders, the public and organizations have until 31 Oct. to respond, after which controllers face a March 2025 deadline to comply with the rules.Full story
The U.S. District Court for the Western District of Washington partially granted Amazon's motion to dismiss its antitrust lawsuit with the Federal Trade Commission, Reuters reports. The FTC's lawsuit claimed Amazon restricts competition with its fulfillment and advertising services.
Since its 2020 establishment, the California Privacy Protection Agency has cooperated with numerous international data protection authorities.