The IAPP released the third edition of “European Data Protection: Law and Practice” in both print and digital formats. The book contains information for privacy professionals seeking their Certified Information Privacy Professional/Europe certification, including the scope of the EU General Data Protection Regulation, data processing criteria and data subject rights.
In early February, the U.S. Federal Trade Commission published a proposed order that fines telehealth and discount prescription provider GoodRX $1.5 million. Though part of the case involves deception — one of two prongs under the FTC Act — the case also raises the first-of-its-kind use of the Health Breach Notification Rule.
Several U.S. state legislatures made progress toward passing various forms of consumer privacy legislation in the past week, while another state-level consumer privacy bill failed to garner support in Illinois.
The European Parliament supported a proposal for complementary rules to the Digital Services Act and Digital Markets Act targeting online political advertising. A press release said processing sensitive data for advertising practices like microtargeting can harm individuals' democratic rights. "Traditional rules may be ineffective, as they are often hard to enforce when applied online, where new technologies and tools create opportunities to influence and target voters," it said.
A bill introduced in the California Legislature would establish an office of artificial intelligence within the Department of Technology. The office would be granted authority to "guide the design, use, and deployment of automated systems by a state agency" to ensure systems are designed and deployed in compliance with state and federal laws and regulations.Full Story
South Korea’s data protection authority, the Personal Information Protection Commission, fined Meta 6.6 million won “for allegedly disadvantaging its customers refusing to provide personal information,” Yonhap News reports.
The Court of Justice of the European Union issued a significant ruling for data protection officers Thursday, which centered around Article 38 of the EU General Data Protection Regulation.
Complying with consumer privacy requirements in the EU General Data Protection Regulation, as well as new U.S. state privacy laws, has created a tradeoff of diminished flexibility and efficiency of businesses’ IT infrastructure, the Harvard Business Review reports.
The Office of the Privacy Commissioner of Canada is investigating the federal government invoking the Emergencies Act to compel banks to provide security services with the financial information of COVID-19 lockdown protestors last year, The Epoch Times reports. During the protest, truck drivers participating in the so-called “Freedom Convoy” had their bank accounts frozen without a court order.