Articles from Around the Web

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

Cyberattack of UK sportswear company exposes data of 10M customers

The BBC reports 10 million customers of U.K. sportswear chain JD Sports had their data exposed in a cyberattack. The breach reportedly affected online sales data from 2018-2020, including personally identifiable information. JD Sports representatives said they were contacting affected customers, working with “leading cyber-security experts” and talking with the U.K. Information Commissioner’s Office to respond to the breach.Full Story

Roundup: Canada, EU, US and more

In this week’s Global News Roundup, the Privacy Commissioner of Canada reflected on the commission’s annual report. The European Data Protection Board published its binding decision in the Irish Data Protection Commission’s WhatsApp case. U.S. Republican lawmakers introduced another bill to ban citizens from downloading TikTok. And the Saudi Arabian Data and Artificial Intelligence Authority opened a public consultation period for secondary data use guidelines. (IAPP member exclusive.)Full Story

EU member states move toward agreement on European Health Data Space

Euractiv reports the Council of the European Union is drawing closer to a consensus position on the proposed European Health Data Space. The council's Working Party on Public Health agreed on amendments to the European Commission's proposed provisions regarding secondary use of data, including withholding data for the purposes of public security and national security.

A view from DC: New US Congress, new life for proposed ADPPA

IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, breaks down the latest privacy developments in the nation’s capital, including a look at the potential road ahead for the proposed American Data Privacy and Protection Act as the 118th U.S. Congress settles into its new structure.Full Story

A view from Brussels: ENISA cybersecurity priorities and the threat landscape analysis

Kenyan president announces 'data protection registration system,' digital ID requirement

Kenyan President William Ruto announced the formation of a “data protection registration system” as part of the country’s observation of global Data Privacy Day, The Star reports. Ruto made the announcement as part of a two-day event in Nairobi that connected “stakeholders from government agencies (and) private and public sectors . . .

NIST publishes AI Risk Management Framework

The U.S. Department of Commerce National Institute of Standards and Technology released its Artificial Intelligence Risk Management Framework 1.0 Jan. 26. Required under the National AI Act of 2020, the framework is the product of 15 months of work by NIST scientists who compiled public comments from more than 240 AI stakeholders through multiple listening sessions and workshops, while producing two previous drafts of the document last year. The framework is voluntary but will help organizations deploying AI systems to enhance their trustworthiness and reduce biases.