The Berlin Commissioner for Data Protection and Freedom of Information published its 2023 annual report detailing the DPA's enforcement efforts. Last year, the DPA issued fines totaling 549,410 euros for data protection violations, and received 1,129 data breach notifications while working to increase organizations' compliance with data protection regulations.Full story
A ransomware attack on the U.K. National Health Service exposed the sensitive health data of more than 900,000 patients, The Record reports. The personally identifiable information breached allegedly included "pathology and histology forms that are used to share patient details between medical departments and institutions."Full story
Meta announced it will begin training its AI models using U.K. adults' public posts, while incorporating feedback from the Information Commissioner's Office to ensure transparency. After Meta paused model training due to ICO scrutiny in June, its U.K. users will soon receive directions for opting out of having their data processed if they desire.
Sri Lanka's Data Protection Authority is seeking stakeholder feedback on draft guidelines for data protection management programs under the Personal Data Protection Act. Stakeholders have until 15 Oct. to provide feedback on the proposed guidelines that aim to define data controllers' obligations and ensure organizational compliance. Full story
European Commissioner for Internal Market and Services Thierry Breton announced his resignation in a letter accusing Commission President Ursula von der Leyen of an attempted ousting, Politico reports. Meanwhile, Finland's European Commissioner Henna Virkkunen could soon be appointed to head the Commission's tech regulation and innovation post, Politico also reports.
The Office of the Australian Information Commissioner's latest notifiable data breach report indicated the first half of 2024 had more reported breaches than the previous three and a half years. It is a 9% increase from the second half of 2023 and driven by malicious and criminal attacks, according to the OAIC.
MediaPost reports Google added encryption to its trusted execution environments, a move the company said will protect personal data when it is being used to serve custom advertisements. The technology is a default setting on Google's ad product.Full story
Israel's Privacy Protection Agency's report on information security systems in hospitals and daycares found the health care sector requires improved data security efforts to ensure patient information is safeguarded. The PPA's inspection claimed "7% of the hospitals had a high level of compliance, while 30% of the hospitals complied with the provisions of the law at only a low level."Full story
Colorado's attorney general released new draft rules under the Colorado Privacy Act. Among the proposed regulations are the establishment of a process for attorney general opinion letters and interpretive guidance as well as clarifications around children's and biometric privacy provisions following 2024 legislative action. There will be a public consultation beginning 25 Sept.
Reuters reports genetic testing company 23andMe agreed to pay USD30 million to settle claims of insufficient protection of customers' personal information. The tentative settlement includes three years of security monitoring for 6.9 million customers and must be approved by a U.S. judge.Full story