In this week's Global News Roundup, leaders of the European Commission, the Council of the European Union and European Parliament signed a declaration on EU digital rights and principles. The Office of the Privacy Commissioner of New Zealand completed its investigation into a ransomware attack on information technology provider Mercury IT.
The IAPP appointed Joe Jones as director of its Research and Insights Team. Jones joins the IAPP after serving as deputy director for international data transfers at the U.K. Department for Digital, Culture, Media and Sport. In his new role, Jones will provide strategic direction and contribute to the development of practical content for privacy professionals around the world. IAPP President and CEO J.
According to Husch Blackwell's "Byte Back," the Colorado attorney general's office released revisions to the Colorado Privacy Act draft rules. The updated rules build off the first draft, published in September 2022, and reflect comments from three stakeholder sessions held November 2022. Modifications include changes to provisions concerning privacy notices, consent and data protection assessments. Tweaks were also made to language around universal opt-out mechanisms and dark patterns. The latest draft is under public comment through Feb.
France's data protection authority, the Commission nationale de l'informatique et des libertés, fined Microsoft 60 million euros for alleged third-party cookie violations. The CNIL carried out investigations over nonconsensual cookie placement and tracking through Microsoft's Bing search engine. The regulator noted it is "materially" and "territorially" competent under the ePrivacy Directive.
The General Inspection Coordination of Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, published a form for security incident reporting by personal data controllers. The new document, required as of Jan. 1, includes expanded structured responses and guidelines on the incident reporting process.
Zurich Insurance Group's Chief Executive Officer Mario Greco cautioned large-scale cyberattacks are a growing concern among industry executives and will "become uninsurable," the Financial Times reports.
The director of Belarus' National Center for Personal Data Protection signed an order implementing rules for the cross-border transfer of personal data. The order includes member states of the Eurasian Economic Union and defines allowable cases of cross-border data transfers, including transfers by state bodies and other organizations.
In a letter to parliament, the Netherlands' Minister for Digitalisation Alexandra van Huffelen said the Dutch data protection authority, Autoriteit Persoonsgegevens, will strengthen supervision of algorithms that process personal data. Beginning this month, the AP will monitor algorithms for transparency, discrimination and arbitrariness. It will also identify and analyze risks of algorithms, and facilitate and enhance collaboration with other organizations.
Ireland's Data Protection Commission announced an own-volition inquiry into the potential compromise of more than 5 million Twitter accounts reported in November 2022.
Concerns are being raised over a proposal to require notification of third-party access to personal data within New Zealand's Privacy Act, RNZ reports. The country's ministry for children, Oranga Tamariki, warns the changes could put children, who have "an expectation of confidentiality," in danger.