The Hill reports U.S. House Committee on Homeland Security Chair Bennie Thompson, D-Miss., and Cybersecurity, Infrastructure Protection and Innovation Subcommittee Chair Yvette Clarke, D-N.Y., called on Twitter to respond to recent whistleblower claims alleging lax cybersecurity practices.
U.S. Federal Communications Commission Chairwoman Jessica Rosenworcel released public responses from top mobile carriers in response to an inquiry into their data retention and privacy practices. Rosenworcel’s request for information was issued to the top 15 U.S. mobile providers.
The proposed American Data Privacy and Protection Act and its legislative path are the closest U.S. Congress has ever been to passing comprehensive federal privacy legislation. The IAPP Resource Center has a topic page dedicated to all things ADPPA, including the latest version of the bill and various resources, analysis and original IAPP reporting related to the bill's progress. The Resource Center also carries a separate topic page for U.S.
Technology company Block is facing a class-action lawsuit for its alleged response to a data breach, IT Pro reports. Plaintiffs allege Block waited four months to notify customers of a breach to its mobile payment service Cash App application. In December, Block discovered a former employee downloaded user information and was able to access customer names, brokerage account numbers and trading activity.
While China has pursued passing multiple data security laws in recent years, cross-border data sharing rules are still being finalized. Rules and guidance provided in recent months outline initial implementation details for transfers.
Geolocation data is a growing topic among privacy professionals due to the lack of regulatory safeguards around such data. Gravy Analytics Vice President of Legal and Chief Privacy Officer Jason Sarfati said arriving at a legislative solution isn't easy given misunderstandings around user identifiability. Sarfati offered a rundown of what geolocation data is all about and pointers for U.S.
California Attorney General Rob Bonta announced the first enforcement action under the California Consumer Privacy Act, a $1.2 million settlement with multinational retailer Sephora over violations of the law's "Do Not Sell" provisions. Sephora's violation specifically relates to failures to inform individuals about the sale of their data and process sale opt-outs through the Global Privacy Control. The retailer did not utilize the 30-day cure period allowed under the CCPA. The landmark settlement also includes required operational improvements.