Popular holiday gadgets further commercial surveillance
Consumers shopping for devices this holiday season may get more than they bargained for in terms of the personal data they are giving to Big Tech, Gizmodo reports.
Consumers shopping for devices this holiday season may get more than they bargained for in terms of the personal data they are giving to Big Tech, Gizmodo reports.
More than 700 privacy professionals from over 40 countries responded to the IAPP-EY Annual Privacy Governance Report 2022, sharing details on the average privacy office in 2022. Research focused on governance and organizational structures, privacy strategy and planning, compensation and budget management, and performance metrics and monitoring. More than 30% of organizations reported prioritizing international transfer rules and privacy impact assessments and 66% reported their privacy strategy is aligned with their organization's overall corporate strategy.
European Data Protection Supervisor Wojciech Wiewiórowski welcomed proposed regulation, including security and data minimization principles, in EU-wide cybersecurity requirements.
Female health application Flo's "Anonymous Mode" feature, created with assistance from global law firm Dechert, enables the app's 48 million users to use its health services without personally identifiable information. In the gaming space, developer King's privacy notice, created with legal design agency Amurabi, is mirrored after its games to engage users in an interactive experience. For their unique privacy and data protection services, Dechert and King and Amurabi received the 2022 HPE-IAPP Privacy Innovation Awards, for the Americas and EMEA/APAC regions, respectively.
The Dutch data protection authority, Autoriteit Persoonsgegevens, said a plan to store government data in commercial cloud services comes with major privacy risks.
A potential loophole within the Illinois Biometric Information Privacy Act has been exposed, Biometric Update reports. In the recent federal court case, Powell v. DePaul University, an online student claimed the school defied BIPA by "using an online remote proctoring tool to capture, store, and disseminate his and other students’ facial geometry data” without consent. DePaul was granted dismissal after claiming it was a financial institution exempted from BIPA under Title V of the U.S.
Twitter may not be fulfilling requirements to claim Ireland as its main establishment under the EU General Data Protection Regulation, TechCrunch reports. If Ireland is not the platform's main establishment, Twitter will no longer qualify for participation in the GDPR's one-stop-shop mechanism.
Thousands of Apple and Google mobile applications were found to contain computer code developed by a Russian software company disguised as a U.S. company, Reuters reports. The apps, including some used by the Centers for Disease Control and Prevention and the U.S. Army, were made by Pushwoosh. Upon contact by Reuters, the CDC removed seven of its public apps, while the Army removed an app in March after it was used by soldiers at a combat training base.
Belgium's Data Protection Authority recently established its core enforcement priorities for 2023. The ADP will focus on developing positions on cookies to correlate with the rest of Europe and forging stronger relationships with organizations’ data protection officers.
Google reached a $391.5 million settlement with 40 state attorneys general over allegations its location tracking misled users, The New York Times reports. The state attorneys general said the settlement, which followed a four-year investigation, is the largest involving internet privacy by U.S. states. Under the settlement, Google agreed to clarify its location tracking disclosures in 2023.