OIG report finds US Department of Interior allows easily guessable passwords
The Office of the Inspector General for the U.S. Department of the Interior issued a report criticizing the department's cybersecurity practices, TechCrunch reports.
The Office of the Inspector General for the U.S. Department of the Interior issued a report criticizing the department's cybersecurity practices, TechCrunch reports.
In a meeting with TikTok CEO Shou Zi Chew, European Commission officials focused on compliance with EU regulations and topics including efforts to protect children on the platform, Politico reports.
Approximately a dozen beta testers of iRobot’s Roomba vacuum claim the company "misled" them about the use of their personal data, according to an MIT Technology Review investigation. Testers believe they did not consent to iRobot sharing "test users’ data in a sprawling, global data supply chain, where everything ... captured by the devices’ front-facing cameras could be seen," including facial images.
Meta said its Facebook and Instagram platforms will tighten restrictions on data available to advertisers to target teens, the Guardian reports. Starting in February, advertisers will no longer be able to access a user's gender or posts they have engaged with for targeted advertising. Instead, only a user's age and location will be available.
In light of the Dobbs decision by the U.S. Supreme Court overturning Roe v. Wade, non-Health Insurance Portability and Accountability Act-covered entities, such as reproductive health applications, must be required to better protect user data, Center for Democracy and Technology legal intern Siddhu Anandalingam writes.
The IAPP is now accepting nominations for its 2023 Privacy Vanguard Awards. The awards honor privacy professionals whose pioneering work helps shape the future of privacy and data protection. Awards recognize one IAPP member from five geographical regions — Asia, EMEA, Latin America (including Mexico), North America and Oceania — each year and winners are formally celebrated at the IAPP Global Privacy Summit. Applications are due by 5 p.m. ET, Feb.
Enforcement of the EU General Data Protection Regulation started with a bang Jan. 4 as Ireland's Data Protection Commission adopted final decisions focused on use of contract as a legal basis for personalized advertising by Meta's Facebook and Instagram.
Members of European Parliament and Artificial Intelligence Act co-rapporteurs circulated the latest compromise amendments to Parliament's proposal, Euractiv reports. The new text includes provisions for fundamental rights impact assessments and high-risk system obligations. MEPs will have a formal review of the proposal during a technical meeting Jan. 11.
Digital Rights Ireland is appealing the Irish Data Protection Commission's ruling on Facebook's responsibility in a data leak that affected 530 million users before the Irish Circuit Court. Following a complaint by DRI, the DPC determined the leak did not qualify as a data breach under the EU General Data Protection Regulation, meaning impacted individuals do not have to be notified.