Sectoral experts will join members of U.S. President Joe Biden's administration at the White House for a discussion on privacy, competition, online safety and Big Tech harms, Axios reports. The dialogue will focus on outlining specific harms stemming from Big Tech's practices and platform accountability.
There are growing issues and risks around the increasing deployment of customer identity and access management systems. The emerging trend for addressing these potential issues is self-sovereign identity solutions, which provide more control, choice and transparency over how personal data is handled by identity service providers. In this white paper, IAPP Senior Fellow for Privacy Engineering Katharina Koerner, CIPP/US, reviews the extent of SSI’s promise and what privacy professionals need to consider with this particular solution.
Civil society members wrote to the World Bank raising concerns regarding plans to roll out a digital identification system. The 73 signatories urged the bank "to take immediate steps to cease activities that promote harmful models of digital identification systems" while calling for impact assessments and more transparency.
Euractiv reports the European Commission will soon introduce the Cyber Resilience Act, which lays out cybersecurity requirements for connected devices. The draft framework will cover digital products and their data processing solutions with exemptions for products covered by sector-specific regulations. Proposed security requirements for product design and development processes include ensuring confidentiality of data, encryption and purpose limitation principles.
Organizations and individuals are still grappling with the impacts to women's reproductive health privacy following the U.S. Supreme Court's reversal of Roe v. Wade. The IAPP Resource Center carries guidance documents produced by Morrison Foerster outlining best practices for responding to the new landscape following the court's ruling, including privacy best practices for individuals, health care providers and technology companies.
The Indonesian House of Representatives announced an agreement between the House Commission on Defense, Foreign and Information Affairs and the Ministry of Communication and Information to elevate the Personal Data Protection Bill to plenary meeting for immediate ratification into law. "The PDP Bill raises public awareness and ensures recognition and respect for the importance of protecting personal data," Minister of Communication and Information Johnny Plate said.
TechCrunch reports the Belgian Market Court suspended IAB Europe's appeal of the Belgian Data Protection Authority's decision on the Transparency and Consent Framework while referring questions to the Court of Justice of the European Union. The referrals to the CJEU focus on the definition of joint data controllership and whether user consent signals via TCF can be considered personal data under the EU General Data Protection Regulation.
A recently filed lawsuit that may be granted class-action status alleges Walmart violated the Illinois Biometric Information Privacy Act. The complaint, brought by Illinois resident James Luthe, alleges Walmart illegally used “cameras and advanced video surveillance systems” and a software database provided by Clearview AI.
The U.K. Information Commissioner’s Office issued an enforcement notice to the Department for International Trade and a practice recommendation to the Department for Business, Energy and Industrial Strategy. The recommendation to the BEIS was for “persistent failures” in responding to information access requests within the time limit required by law. The DIT was late in responding to more than 50% of requests between January and March.
BBB National Programs' Children’s Advertising Review Unit found the owner of a children’s mobile application game violated the U.S. Children’s Online Privacy Protection Act. The company, Tilting Point Media, also violated CARU’s self-regulatory Guidelines for Advertising and for Children’s Online Privacy Protection. Per COPPA and CARU guidelines, companies cannot collect the personal information of users under age 13. However, CARU reviewers were able to use the app posing as a 10-year-old and could consent to receive “personalized” advertising.