The U.S. Supreme Court rejected an appeal by NSO Group to dismiss a 2019 lawsuit brought by Meta, which accused the spyware company of installing Pegasus malware on WhatsApp users’ cellphones, MediaPost reports. The decision now allows claims alleging it violated federal and California state anti-hacking laws and WhatsApp’s terms of service.
Jan. 12: Join the IAPP for an OberservePoint-sponsored web conference titled “Shining a Light on Dark Patterns: Good Marketing vs Consumer Manipulation.” The conference will focus on helping online advertisers determine where the line between dark patterns and experience optimization lies following the release of the Organisation for Economic Co-operation and Development's report "Dark Commercial Patterns.”
In an op-ed for Government Technology, Senior Fellow for the Center for Digital Education and the Center for Digital Government Jim Jorstad writes as data is increasingly used in higher education, ensuring user control of that data "takes on increased significance." Data collected by colleges and universities can include personal, academic and demographic data, and much more, he said.
Last week, Ireland's Data Protection Commission fined Meta 390 million euros, announcing Facebook and Instagram's contract basis for seeking user permission to collect data for personalized advertising is invalid. The decision highlights a divide between European regulators, reflects the ongoing transformation of the advertising technology space and raises uncertainty around compliance with the EU General Data Protection Regulation.
In this week’s Global News Roundup, France's data protection authority, the Commission nationale de l'informatique et des libertés, issued fines to both Apple and Microsoft. The Washington, D.C., attorney general’s office entered a settlement with Google over dark patterns that revealed user location data. And, Ireland's Data Protection Commission announced an inquiry into the potential compromise of more than 5 million Twitter accounts. (IAPP member exclusive.)Full Story
The U.S. Federal Communications Commission voted 4-0 to file a Notice of Proposed Rulemaking to data breach reporting requirements for telecommunications providers. Proposed requirements include reporting all types of data breaches regardless of intent and immediate consumer breach notification.
The U.K.'s Central Digital and Data Office and Centre for Data Ethics and Innovation developed the Algorithmic Transparency Recording Standard Hub. The hub includes the Algorithmic Transparency Recording Standard, guidance on its use and published algorithmic transparency reports. "Algorithmic transparency means being open about how algorithmic tools support decisions.
The Wall Street Journal reports the Cyberspace Administration of China will begin enforcing its regulation over "deep synthesis" technologies Jan. 10. It's the first known legislation to comprehensively regulate artificial intelligence-powered image, audio and text-generation software that produces deepfakes. The regulation requires conspicuous labels for synthetically generated or edited images, videos or text that may be perceived as real or genuine.
Google agreed to a $23 million settlement in a 2010 lawsuit alleging it disclosed users search queries to publishers, MediaPost reports. Users said the data included names and other identifying information. If accepted by U.S. District Court Judge for the Northern District of California Edward Davila, approximately 200 million U.S. users who conducted Google searches between Oct. 25, 2006 and Sept.
Euractiv reports Germany may influence EU institutions' trialogue negotiations on the proposed Artificial Intelligence Act. At the Council of the European Union's Transport, Telecommunications and Energy Council meeting Dec. 6, 2022, German Federal Minister for Digital and Transport Volker Wissing indicated "there is still room for improvement" on several aspects of the proposal despite an agreed stance among EU member states. Areas that require attention from the German perspective include biometrics, law enforcement use, AI in the workplace and classification of high-risk AI.