Only 1.9% of directors at 91 companies listed on the S&P 500 have “relevant” cybersecurity experience, according to research conducted by The Wall Street Journal. The study reviewed the professional backgrounds of 4,621 board directors who together hold 100 board seats at 91 companies, accounting for 18.2% of S&P 500 companies. Seven board directors, or 0.15%, worked in a chief information security officer role.
The U.S. Department of Health and Human Services proposed a rule aligning 42 CFR Part 2 privacy regulations with the Health Insurance Portability and Accountability Act, Axios reports. The proposed rule, aimed to help substance use disorder patients, requires one-time patient consent for disclosure of treatment and allows HIPAA-covered entities to access records. It also gives patients the right to know when and to whom their information was disclosed.
U.S. Census Bureau Director Robert Santos defended the agency’s use of differential privacy to shield 2020 census participants’ identities in a letter reviewed by The Hill. Santos claimed differential privacy was the "best solution available" to prevent outside groups from reidentifying participants using third-party data and “powerful computers.” However, “prominent state demographers and academic researchers” previously urged the Census Bureau not to utilize differential privacy because it delayed data, created inaccuracies and found thousands of U.S.
Compliance platform SafeGuard Privacy announced it raised $7 million in funding led by venture capital firm TechOperators. The software as a service-based platform “allows publishers, agencies, brands, data providers, and tech platforms to assess, audit, and comply with global privacy compliance laws and requirements.” With the introduction of data privacy legislation in 33 U.S.
Ireland's Data Protection Commission announced a 265 million euro fine to Meta over alleged EU General Data Protection Regulation violations. The fine is the third-largest GDPR penalty served to date, following a 405 million euro fine from Ireland to Meta in September.
The U.S. Federal Trade Commission responded to a motion to dismiss the federal court claims against data broker Kochava over alleged unfair and deceptive location data sales, MediaPost reports.
Indian Minister for Railways, Communications, Electronics and Information Technology Ashwini Vaishnaw is targeting July or August 2023 for passage of the proposed Digital Personal Data Protection Bill, the Indian Express reports. Vaishnaw said "sea change over the years" has led to the drafting of the latest bill and prior proposals, while also noting the prime minister's mandate "to prepare a comprehensive digital legal framework." Vaishnaw added the draft bill is currently under public consultation and review by an unspecified parliamentary committee.
In its Annual Report, Belgium's Data Protection Authority called 2021 a record year, with requests for advice rising 87% and complaints up 181% over 2020. A 2021 Facebook data breach contributed to the unprecedented 1,928 complaints received throughout the year, with a total of 1,120 stemming from the breach.
The U.K. Information Commissioner's Office announced biometrics is a key area of focus for its regulatory sandbox. The ICO said it is interested in working with "innovative biometrics projects using personal data" in the public, education, recruitment and employment-monitoring sectors. "Our aim is to promote and enable the use of secure, responsible and lawful innovations.
In this week’s global news roundup, European Parliament rapporteurs for the proposed Artificial Intelligence Act circulated a fresh compromise text focused on overhauling parts of the bill's enforcement framework. The U.K. Information Commissioner's Office announced new guidance and resources for data transfer risk assessments. The U.S. Federal Communications Commission said callers must obtain consent prior to delivering "ringless voicemails." And, PwC Senior Associate Ravin Nandle, CIPT, broke down India's proposed Digital Personal Data Protection Bill 2022 for the Privacy Tracker.