The Philippines' National Privacy Commission amended its document outlining provisions of its guidelines on personal data processing for loan-related transactions. The amendments cover personal data processing guidelines for loan application evaluations, loan collection and closure, and include a new provision for guarantors.
A December data breach of password manager LastPass potentially compromised millions of users' data, The New York Times reports. LastPass said unauthorized parties accessed its cloud database and obtained customers' data.
No doubt, privacy is front and center in the state of California. The California Consumer Privacy Act went into effect in 2020 and was recently amended by the California Privacy Rights Act, which entered into force Jan. 1. Additional targeted privacy legislation passed the state legislature in 2022, including the California Age-Appropriate Design Code Act. The fifth edition of "California Privacy Law" by Baker McKenzie Partner Lothar Determann helps make sense of this flurry of activity.
France's data protection authority, the Commission nationale de l'informatique et des libertés, fined Apple 8 million euros over alleged nonconsensual advertisement tracking. Investigations carried out in 2021 and 2022 found iPhone IOS 14.6 users had identifiers attached to their devices for the purpose of serving personalized ads without consent as they entered Apple's App Store.
There's overwhelming evidence that 2022 was a banner year for privacy and data protection. As the privacy community shifts attention to 2023, it's worth wondering whether this year will prove as busy and unprecedented as the last. Goodwin Procter Partner and IAPP Westin Emeritus Fellow Omer Tene expects the new year to "call and raise" the privacy activity of 2022. Tene offers his predictions on U.S. state and federal privacy matters as well as the international outlook.Full Story
The Office of the Attorney General for the District of Columbia announced a $9.5 million settlement with Google over use of "dark patterns" that led to user location data collection.
Wired reports the 2020 hack of the encrypted phone network EncroChat by police across Europe, led by French and Dutch law enforcement authorities, resulted in legal challenges. Access to the system revealed 100 million messages and led to the arrest of thousands of EncroChat users. Lawyers are disputing the legality of the data access and say hacked messages should not be used as evidence in court.Full Story
The Washington Post reports hackers disclosed records and email addresses from 235 million Twitter accounts on a public forum. The information was reportedly collected using a flaw in Twitter’s system that allowed outsiders to gain access to an unlimited list of email addresses and phone numbers. The exposure comes as the U.S.
E-commerce company Shopify launched "Audiences," a marketing tool that enables retailers to pool customer data and target ads through Meta and Google's advertising platforms, the Financial Times reports. Marketers can then target ads to customers who purchased similar items from another retailer. The tool is designed to bypass Apple's privacy settings.
In an op-ed for The Wall Street Journal, lawyer Sanford Young said electronic court filings mean sensitive data is "forever accessible to anyone with access to the internet." Searches on court websites can lead to downloadable, and typically unencrypted, case dockets and papers revealing sensitive personal information — including medical, psychiatric and financial records. "Court-system websites are becoming treasure troves of confidential information.