The Cyberspace Administration of China and the Ministry of Public Security released requirements around the use of facial recognition technology, which go into effect 1 June. The rules govern the basic requirements for using the technology to process information, how to do it safely, and the supervision and management requirements around its use.Full story
The U.K. Information Commissioner's Office said genetic testing company 23andMe is still required to protect customers' data even while undergoing the bankruptcy process. The agency said it is monitoring those proceedings after it concluded a data breach investigation and gave notice of a provisional fine and enforcement notice.Full story
Latvia's Data State Inspectorate released the findings from its investigation into online retailers' privacy notices. The DVI recommended companies make sure notices are easily accessible to consumers and maintain data deletion practices to ensure compliance with data protection regulations.Full story
Denmark's data protection authority, Datatilsynet, submitted its annual report to the Ministry of Justice, the Ministry of Finance and the National Audit Office, detailing the authority's enforcement efforts in 2024.Full story
The European Commission claimed Meta still needs to submit a risk assessment under the Digital Services Act before launching its MetaAI tool in the EU, Euronews reports.
South Korea's Personal Information Protection Commission met with stakeholders from Startup Alliance to discuss developing the AI open-source ecosystem.
The enforcement actions taken by the U.S. Federal Trade Commission against Mobilewalla and Gravy Analytics "signal the agency expects companies to conduct risk-based due diligence and verify consent," Interactive Advertising Bureau Legal Counsel Adam Eisler, Executive Vice President and Legal Counsel Michael Hahn, and Assistant General Counsel Arlene Mu, AIGP, CIPP/C, CIPP/US, CIPM, PLS, write.
Office of the Privacy Commissioner of Canada released the findings of its consultation into age assurance and the potential impact the technology has on individuals' privacy. The OPC recommended organizations consider the use of the technology, conduct risk assessments and ensure sensitive personal data is protected when using technology to determine a user's age.
A new White House executive order called for eliminating "information silos" between federal agencies. The order allows for the interagency sharing of unclassified records, data, software systems and information technology systems for the listed purposes of reducing duplication of work and stopping fraud.Full story
Genetic testing company 23andMe said it has not changed how it stores or protects user data as it undergoes bankruptcy proceedings, The New York Times reports.