Four immigration rights groups sued LexisNexis in Illinois state court, alleging it violated privacy and consumer rights, Computer Weekly reports. The lawsuit alleges LexisNexis’ Accurint data aggregator collected and combined “extensive” personal information on individuals without their knowledge or consent and distributed it to federal immigration authorities, among other third parties.
Despite clearing up potential discrepancies around its provisions for a supervisory authority, issues regarding Indonesia's proposed Personal Data Protection Law may not be totally resolved. Christian Teo & Partners Associate Glenn Wijaya opines the PDPL, which is expected to be promulgated this month, contains more conflicts across various Indonesian statutes covering personal data.
Australia Attorney-General Mark Dreyfus and Minister for Trade and Tourism Don Farrell jointly announced the country joined the Global Cross-Border Privacy Rules Forum.
While data protection and privacy regulations emerge and develop around the world, personal data continues to be legally collected, aggregated, analyzed, packaged and resold. Proofpoint Resident Chief Information Security Officer J.C. Checco said the gap that exists in effectively regulating data practices "lies in the need for transparency in the flow of personal information." Checco outlines a potential resolution framework based on personal information privacy ontology.Full Story
The IAPP announced Mark Thompson, CIPP/E, CIPM, CIPT, FIP, as its Chief Strategy Officer. Thompson was director of the IAPP Research and Insights team prior to the new appointment. In his new role, Thompson will develop strategy and provide executive oversight of operations for the IAPP globally.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced a public consultation on the draft resolution for regulations outlining the regulator's sanctioning powers. The ANPD said the regulations aim to "promote the effectiveness of the (General Data Protection Law) through the establishment of a methodology" for its sanctions that "provide legal certainty for both (the) regulated and regulators." The public comment deadline is Sept.
Developing content for children has become big business for entertainment platforms, Marketing Brew reports. However, when children watch programs on streaming services, companies are required to limit collection of their data and restrict behavioral and targeted advertising, per the U.S. Children’s Online Privacy Protection Act.
Hackers breached cloud communications company Twilio, Vice reports. The company provides infrastructure to companies that send automated text messages to users, so the hackers had an opportunity to take over users’ accounts that were tied to their phone number on a service backed by Twilio. One such service was encrypted messaging application Signal. Signal announced approximately 1,900 users were targeted by the hackers.
The Hill reports TikTok wrote to U.S.
Scotland is nearing approval of the world’s first statutory Code of Practice for use of biometric information, Holyrood reports. The regulation would govern police and the criminal justice system’s “acquisition, retention, use and destruction of biometric data.” Scotland’s Criminal Justice Committee has signed off on the regulation, which could be finalized by mid-November if national ministers do not object to any of its provisions in their meeting Sept.