Privacy in practice: Areas of focus in 2023
Join members of the IAPP Research and Insights Team Jan. 18 as they share their top three areas of focus for privacy program management, privacy law and privacy technology as 2023 begins.
Join members of the IAPP Research and Insights Team Jan. 18 as they share their top three areas of focus for privacy program management, privacy law and privacy technology as 2023 begins.
Ireland's Data Protection Commission adopted final decisions on two inquiries into Meta's Facebook and Instagram, fining the company a total of 390 million euros and potentially leading to an upheaval of its personalized advertising model in the EU. The DPC announced Meta's basis for seeking user permission to collect data for personalized advertising is invalid and gave the company three months to bring its data processing operations into compliance with the EU General Data Protection Regulation.
Life Hope Labs reached a $16,500 settlement with the Office for Civil Rights at the U.S. Department of Health and Human Services over a potential violation of the Health Insurance Portability and Accountability Act Privacy Rule's right of access provision. The Georgia-based diagnostic laboratory will also implement a corrective action plan, including two years of OCR monitoring.
U.S. state legislatures are expected to add to the growing list of comprehensive state privacy laws over the course of 2023. While a lot of attention is paid to which state is next, 2023 may be defined by existing state privacy laws and how companies react to them becoming effective. The California Privacy Rights Act and Virginia's Consumer Data Protection Act came online Jan. 1, and three other statutes will join later this year.
The New York Times reports a U.S. military-owned biometric database containing personal and biometric data on 2,632 individuals was sold privately on eBay. A German security researcher purchased the biometric capture device for $68 and found it retained names, nationalities, photographs, fingerprints and iris scans of individuals tied to wartime efforts in Afghanistan and Iraq. The Times found the information belonged to known terrorists, wanted individuals, U.S. government contractors and U.S.
Pluribus News reports consumer advocates are lobbying for U.S. state legislatures to take up consumer-focused biometric privacy bills during 2023 legislative sessions. American Civil Liberties Union Senior Policy Counsel Chad Marlow said there's "a fairly good chance" at least 10 states introduce legislation on biometrics after his group engaged with multiple states in recent months to coordinate on a consensus framework.
California Privacy Protection Agency Board member Chris Thompson resigned Dec. 16, 2022, according to the agency. Thompson tendered his resignation, effective immediately, at the last board meeting as he becomes chief of staff for Los Angeles Mayor Karen Bass. "As we’ve moved through startup, development, and building stages, I have especially valued Mr.
The new year marks a new chapter in U.S. comprehensive state privacy law. The California Privacy Rights Act and the Virginia Consumer Data Protection Act took force Jan. 1. The CPRA amends the existing California Consumer Privacy Act and hands enforcement powers to the California Privacy Protection Agency. Final CPRA regulations are pending final approval ahead of July 1 enforcement.
CNBC reports Meta's Facebook reached a $725 million settlement, pending court approval, over a class-action privacy lawsuit related to 2018 Cambridge Analytica claims.