Articles from Around the Web

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

Google reaches settlement 'in principal' in 2018 location data class action lawsuit

MediaPost reports Google and smartphone users established an “agreement in principle” to settle a federal class-action lawsuit over the company allegedly tracking their locations when users opted out of such tracking. The lawsuit alleged Google could track user locations even when they turned off location history unless they also turned off the separate setting “Web and App Activity.” The lawsuit was originally brought forth by San Diego resident Napoleon Patacsil in 2018. The proposed settlement has not yet been finalized.

Council of the European Union completes initial Data Act compromise pitches

Euractiv reports the Czech Presidency of the Council of the European Union submitted its final compromise proposals on the initial draft of the Data Act. The latest proposals focus on data security and retention periods around cloud provider switching, interoperability and enforcement cooperation. The council also proposed a European Commission-led review of the proposed law two years after its application.

EDPB, EDPS: Lack of resources may bring 'weakened' EU GDPR enforcement

The European Data Protection Board and the European Data Protection Supervisor sent a letter to European Parliament and the Council of the European Union urging increased funding to ensure proper enforcement of the EU General Data Protection Regulation. The regulatory bodies indicated their 2023 budget proposal for increased staffing and financial resources was rejected by the European Commission.

CISA seeks feedback on cyber incident reporting requirements

The Cybersecurity and Infrastructure Security Agency opened a Request for Information seeking public input on how to implement cyber incident reporting as required under the Cyber Incident Reporting for Critical Infrastructure Act of 2022. The RFI was published in the Federal Register Sept. 12 and will be open for public comment for 60 days. The CIRCIA directs CISA to create a Notice of Proposed Rulemaking recommending regulations for cyber incident and ransom payment reporting.

Irish DPC sends draft TikTok children's privacy decision to EDPB

Ireland's Data Protection Commission announced submission of a preliminary decision against alleged TikTok children's privacy violations to members of the European Data Protection Board under Article 60 of the EU General Data Protection Regulation. The case, which began in September 2021, concerns TikTok's platform settings and transparency around the processing of minors' personal data.

CNIL issues 250K euro fine over data security, retention violations

France’s data protection authority, the Commission nationale de l'informatique et des libertés, fined legal service provider Infogreffe 250,000 euros for violating the EU General Data Protection Regulation. An investigation found alleged violations of data retention requirements under Article 5(1)(e) of the GDPR and data security obligations under Article 32.

Upcoming IAPP web conferences: US privacy laws, data mapping and more

  • Sept. 14: Join the IAPP for a web conference titled, “How to Navigate the U.S. Privacy Landscape in 2023” sponsored by OneTrust. The discussion led by OneTrust Director of Privacy & Data Governance Strategy Ryan Edge, CIPP/E, CIPM, and OneTrust Privacy Counsel Tess Macapinlac, CIPP/E, CIPM, will look at the states with privacy laws set to go into effect.

Moving, storage company reveals data breach exposed customer driver's licenses

U-Haul International revealed a data breach potentially exposed customer "names and driver's license or state identification numbers," Bleeping Computer reports. In a draft letter to consumers, the moving and storage company said the breach did not affect credit card information. The company discovered a breach of the customer contract search tool July 12 and found some customer rental contracts were accessed between Nov.