Around the world with global privacy law and policy
Join the IAPP Research and Insights Team for a 13 Feb. LinkedIn Live covering the current state of global privacy laws and policies.
Join the IAPP Research and Insights Team for a 13 Feb. LinkedIn Live covering the current state of global privacy laws and policies.
The U.K. Information Commissioner's Office published guidance on how to keep employment records safe. The guide covers collecting and storing employee information and how it can be used, as well as a checklist on how to best do each activity.Full story
The European Commission asked retailer Shein to provide more detailed information about how it protects users' personal information and other business practices as part of its investigation into the company's compliance with the EU Digital Services Act. The company has until 27 Feb. to respond.Full story
The U.S. Senate Committee on Commerce, Science, and Transportation approved the Kids Off Social Media Act, a bipartisan bill aiming to place safeguards around children's access to social media, MediaPost reports. The bill prohibits users under age 13 from creating accounts and prevents social platforms from using algorithms to target content toward individuals under age 18. Full story
U.S. AI Safety Institute Director Elizabeth Kelly announced she will leave her role after President Donald Trump rescinded the executive order that created the agency, Bloomberg News reports. Former White House AI Advisor Ben Buchanan said Kelly "was an extraordinary leader for the Safety Institute at a fraught moment when success was far from preordained."Full story
Lithuania's State Data Protection Inspectorate's annual enforcement report indicated the agency received 273 personal data security breach notifications in 2024 that affected more than 1,467,368 individuals. The SDPI said it found 49% of data security breaches were due to cyber incidents including cyberattacks, data encryption issues and human error.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, released its 2024 report highlighting the agency's enforcement activities. In 2024, CNIL issued 331 decisions, including 180 compliance orders and 87 sanctions totaling 55,212,400 euros. The CNIL said companies were often sanctioned for noncompliance and noncooperation with individuals' request to delete or access data.Full story
Bird & Bird Associate Hunter Dorwart, Data Associate Harry Qu, CIPP/E, and Partners Tobias Bräutigam, CIPP/E, CIPM, FIP and James Gong, CIPP/CN, CIPP/E, CIPP/US, CIPM, wrote about five differences between EU and Chinese AI laws. They dig into the fundamental differences of each regulator's approach to the technology and what that means for compliance.Full story
The AI Action Summit scheduled for 10 Feb. in France arrives as the global AI landscape continues to navigate thorny issues with balancing innovation and safety. As countries grapple with DeepSeek chatbot concerns, recent actions and remarks show the ongoing divides to a unified global approach for tackling AI safety and governance. IAPP Staff Writer Lexie White reports on the latest.Full story
Gizmodo reports on complaints from children's privacy advocates that a Talkspace-built app for teenagers was sending their mental health data to social media and advertising companies, including TikTok, Reddit and Spotify. The tracking pixels were removed from some city-specific sites but allegedly remain present on others.Full story