The Court of Justice of the European Union issued a decision forcing data controllers to identify entities they sold personal data to when requested under the EU General Data Protection Regulation. The decision came after an Austrian man sought the companies his personal data was sold to by logistics and postal company Österreichische Post.
The Office of the Privacy Commissioner of New Zealand published an advisory regarding increased data breaches across the country. The regulator reported a 41% increase in data breach notifications in the first half of the current financial year versus the same period last year. Privacy Commissioner Michael Webster said companies should "report the breach as early as possible" within the mandated 72-hour reporting window under the Privacy Act.
Experimentation will be pivotal for marketers to succeed in navigating Apple’s “App Tracking Transparency," VMG Catalyst Partner Jeff Truong said in an interview with Forbes. Truong said enhancements in user privacy at Apple have increased customer acquisition costs.
Between Dec. 22-30, 2022, numerous employment-related Illinois Biometric Information Privacy Act class-action lawsuits were filed in Cook County Circuit Court, the Cook County Record reports.
EU-based advocacy group NOYB published the Irish Data Protection Commission's final decisions invalidating Meta's contract basis for seeking user permission to collect data for personalized advertising on Facebook and Instagram. NOYB said the decisions — which followed complaints the group made in May 2018 on the day the EU General Data Protection Regulation took effect — "clearly shows massive disagreement" between the DPC and the European Data Protection Board.
The U.S. Federal Trade Commission finalized enforcement action against online alcohol marketplace Drizly and CEO James Cory Rellas related to its 2020 data breach. The agency voted 4-0 on finalization after no further comments were submitted. The order calls on Drizly to destroy unnecessary data and implement data minimization and information security programs, while holding Rellas to individual requirements.
Hogan Lovells published a memorandum on a potential shared EU-U.K. framework for binding corporate rules to facilitate cross-border data transfers. The note, sent to relevant data protection authorities in the EU and the U.K., reflects stakeholder opinions presented at a joint workshop December 2022. The memorandum proposes implementation of "a system of mutual recognition of authorisations with minimal or reduced scrutiny, which would be complemented by a regulatory cooperation" between EU DPAs and the U.K.
The Office of the Inspector General for the U.S. Department of the Interior issued a report criticizing the department's cybersecurity practices, TechCrunch reports.
In a meeting with TikTok CEO Shou Zi Chew, European Commission officials focused on compliance with EU regulations and topics including efforts to protect children on the platform, Politico reports.