The provincial government of Guizhou announced state entity Guiyang Global Big Data Exchange completed the first sale of a jobseekers' personal data, the South China Morning Post reports.
The American College of Pediatricians left an unsecured Google Drive on its website containing "a large cache of sensitive documents" about the organization, Wired reports. The cache comprised of more than 10,000 documents included "financial and tax records, membership rolls, and email exchanges" along with donor information and board members' Social Security numbers. Full Story
Several information privacy groups and a former Facebook executive filed a friend-of-the-court brief in support of California Age Appropriate Design Code amid a federal legal challenge of the law, MediaPost reports.
Wireless carrier T-Mobile announced a second data breach this year, Bleeping Computer reports. Unlike an earlier breach disclosed in January, the most recent breach was limited in scope and only impacted 836 customers. However, the information stolen "varied for each of the affected customers" and included personally identifiable information, as well as account PIN numbers and Social Security numbers.
A new chart in the IAPP Resource Center offers a look at the EU regulatory decision-making process and how laws get approved. The chart describes the main steps of the codecision procedure, the most common decision-making procedure among EU institutions and includes an illustrative timeline of the EU General Data Protection Regulation process. Full Story
The number of lawsuits alleging violations of Illinois' Biometric Information Protection Act increased 65% following a precedent-setting February ruling by the Supreme Court of Illinois, Bloomberg reports. A total of 122 cases have been filed since the court's White Castle decision, while 74 lawsuits were filed in the two months prior.
Apple and Google entered a partnership to create a "proposed industry specification" to fight unwanted Bluetooth location device tracking, according to a joint press release.
The Information Accountability Foundation wrote a blog outlining the unique requirements for data protection assessments under the Colorado Privacy Act. When Colorado regulations take force in July, covered entities must conduct assessments with first-of-their-kind obligations, according to IAF's analysis of assessment provisions in other domestic or global jurisdictions.
Australia Attorney-General Mark Dreyfus announced the federal government will allocate resources to restructure the Office of the Australian Information Commissioner, the Guardian reports. The OAIC will move to a three-commissioner format, including a commissioner dedicated to handling data breach matters.