Articles from Around the Web

The European Commission released the "European Digital Identity Wallet Architecture and Reference Framework." The document, part of the EU's toolbox toward implementing a European Digital Identity Framework, is intended to "provide all the specifications needed to develop an interoperable EUDI Wallet Solution based on common standards and practices" and will be "complemented and updated over time through the process of establishing the toolbox."

France's data protection authority, the Commission nationale de l'informatique et des libertés, published a study on the economic stakes of the Data Governance Act, set to enter into force Sept. 24.

As privacy compliance checks in litigation and regulatory enforcement become more comprehensive, one way to evaluate a company’s privacy program is through a penetrative test of its cybersecurity controls, Baker McKenzie’s Brian Hengesbaugh, Cristina Messerschmidt and Jerome Tomas write. A "pen" test includes identifying key elements of compliance in a company's privacy program to test, deciding what applications are “in-scope” of the exercise and reporting findings “in the form of privileged legal memorandums” that outline recommendations.

In early February, the U.S. Federal Trade Commission published a proposed order that fines telehealth and discount prescription provider GoodRX $1.5 million. Though part of the case involves deception — one of two prongs under the FTC Act — the case also raises the first-of-its-kind use of the Health Breach Notification Rule.