Data retention has long been a blind spot of Europe's otherwise strict data protection regime. But a possible practical solution might be in sight, journalist Luca Bertuzzi writes. Bertuzzi explored cases in Germany that exemplify legal issues around data retention, possibilities for targeted retention related to specific incidents and attempts by EU member states to push data retention provisions in the context of the ePrivacy Regulation.Full Story
The IAPP is calling for respondents to take part in the annual IAPP-TRU Salary Survey. The anonymous survey provides insights into the salaries and additional compensations of privacy professionals and their teams. This year's survey is expanded to include both in-house and external privacy roles, to provide more comprehensive breakdowns by industry, geography, market and organization.Full Story
During The New York Times Dealbook Summit, TikTok CEO Shou Chew said the video platform will move data to the Oracle cloud infrastructure in the future, where "only U.S. residents can access it," The Wall Street Journal reports. Chew said "no other company is trying to pursue" this kind of solution. He also said TikTok's user data is stored on servers in Virginia and Singapore, noting no foreign government has ever requested U.S.
The IAPP Privacy Around the Globe LinkedIn Live series is headed to South Africa Dec. 6. ABSA Bank Group Head of Data Privacy Amenda Makhetha, CIPM, will join IAPP Vice President and Chief Knowledge Officer Caitlin Fennessy, CIPP, to discuss the country’s Protection of Personal Information Act of 2013, the latest on regulatory priorities, privacy enforcement, privacy professionals’ top areas of focus in the region and more.Full Story
The U.K. announced an update to the Network and Information Systems Regulations, including mandatory incident reporting obligations for managed service providers and minimum security requirements with fines of up to 17 million GBP for noncompliance, The Record reports.
Reuters reports Amazon will issue warning cards with some of its artificial intelligence-based products to bring light to potential discrimination issues the technologies may possess. The AI Service Cards will be attached to cloud-computing products, including facial recognition and audio transcription, to provide information on the limits of those services.
BBB National Programs' National Advertising Division referred advertising claims by information technology security company Zscaler about its Zero Trust Exchange Platform to the U.S. Federal Trade Commission. NAD recommended Zscaler stop making claims comparing its privacy protection attributes and benefits to its competitor and said it referred the case to "the FTC and other regulatory authorities for review and possible enforcement action."Full Story
The incoming 118th U.S. Congress must prioritize passing the American Data Privacy and Protection Act, National Consumers League Executive Director Sally Greenberg writes for The Hill. Despite widespread political division, individuals want better security over their personal data regardless of ideology, she said.
The proposed EU-U.S. Data Privacy Framework is on track to be finalized sometime during spring 2023, if the European Commission’s adequacy process aligns with timelines for its prior decisions. However, finalization does not put questions about the proposed framework’s durability compared to prior invalidated EU-U.S. agreements to rest. Many of those questions were raised by relevant officials and stakeholders at the IAPP Europe Data Protection Congress 2022. IAPP Staff Writer Joe Duball rounds up all the discussions contemplating the future of EU-U.S.