Headlines regarding the U.S. Federal Trade Commission’s record enforcement action against Epic Games over alleged Children's Online Privacy Protection Act violations are likely to focus on the high price tag. IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, found more beyond the financial penalty though, particularly with the FTC's views on teen privacy.
U.S. users of the the single sign-in website for accessing a variety of federal services, Login.gov, do not have their credentials verified by the government, Politico reports. Instead, user validation for federal agencies’ services, such as the Small Business Administration and the Social Security Administration, is conducted by “a group of private-sector data brokers.” The federal government relies on data brokers’ services.
The California Attorney General's Office made waves with the California Consumer Privacy Act settlement in August. More specifically, questions were raised about the attorney general's emphasis on the broad interpretation of the CCPA’s “sale of data” and adoption of the Global Privacy Control.
Bloomberg reports the U.S. Federal Trade Commission is intensifying its probe of Twitter's alleged privacy and data security issues since Elon Musk took over the company. The agency brought in former Twitter Chief Privacy Officer Damien Kieran and Chief Information Security Officer Lea Kissner for questions as to whether Twitter's practices and plans under Musk are consistent with the 2011 consent order the company agreed to over past privacy violations.
Australia Attorney General Mark Dreyfus received the results of a government review of the Privacy Act, launched in December 2019, and is expected to release a response in the first half of 2023, InnovationAus.com reports. Dreyfus said he anticipates "large scale reform of the Privacy Act" to occur next year. Full Story
France's data protection authority, the Commission nationale de l'informatique et des libertés, issued a reminder that new standard contractual clauses will be in effect for data transfers outside the EU as of Dec. 27.
The U.K. Information Commissioner’s Office took an “unusual step” and quietly published information on data breach investigations on its website, InfoSecurity Magazine reports.
The $1.65 trillion omnibus spending bill for fiscal year 2023 expands a ban of TikTok on federal smartphones with concerns user data could be shared with the Chinese government, The Wall Street Journal reports. Federal departments, including the U.S. Department of Homeland Security and Transportation Security Administration, have already imposed bans of TikTok on government-issued smartphones.
The Future of Privacy Forum published a report on data-sharing programs between corporations and research institutions titled "The Playbook: Data Sharing for Research." The report recommends best practices for implementing programs, including steps for data management and sharing.
Data privacy made more news than ever in 2022. The last year proved privacy is not dead, but instead making headlines on a near-daily basis. The busy news cycle never seemed to let up, which begs the question: What developments were most noteworthy for the privacy profession? IAPP Staff Writers Jennifer Bryant, Joe Duball and Alex LaCasse looked back at the flurry of happenings they observed and what's on tap or remains unresolved heading into 2023.Full Story