Malaysia's Department of Personal Data Protection has launched a public consultation after the introduction of amendments to the Personal Data Protection Act. The consultation is aimed specifically at the topics of breach notification, data portability and data protection officer appointment.Full story
Colombia's Superintendence of Industry and Commerce has begun an investigation into WorldCoin's alleged data protection violations, CryptoSlate reports. The investigation aims to determine if WorldCoin maintained adequate privacy standards and "provided sufficient mechanisms for addressing complaints and consultations from data subjects."Full story
El Economista reports the Constitutional Affairs Committee of Mexico's Chamber of Deputies voted 22-16 in favor of changing several constitutional articles that would result in the elimination or restructuring of multiple autonomous government agencies, including Mexico's National Institute for Transparency and Access to Information and Data Protection.
FedScoop reports the White House is giving federal agencies until the end of the year to publish artificial intelligence use cases and prove they are complying with risk management practices. They will also need to include information about whether their AI models use personally identifiable information or circulate information to the public.Full story
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, issued a 290 million euro fine to Uber for allegedly transferring drivers' personal data to the U.S. for two years. The AP claimed Uber did not use a legal transfer tool after the EU-U.S. Privacy Shield was invalidated in 2020. The data reportedly transferred included driver account information, payment methods and medical information. The AP noted Uber ceased the practice when it began utilizing the EU-U.S.
Reuters reports two technology CEOs criticized the direction of European artificial intelligence regulations, saying a complex set of rules could stifle open-source models.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced the country's regulation on data transfers was approved and published in the Official Gazette of the Union. The rules outline the process and criteria for adequacy decisions while regulating the use of standard contractual clauses to facilitate cross-border data transfers.Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he provides an overview of developments around AI bills being considered in California as its 2024 legislative session winds down.Full story
The European Commission is gathering input focused on the protection of minors online, specifically in the context of the Digital Services Act and reporting of child sexual abuse materials, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes. This includes feedback on the Commission's development of guidelines under the DSA to help online platforms provide a high level of privacy, safety and security for minors.
Baker McKenzie partners Elisabeth Dehareng, CIPP/E, and Helena Engfeldt, CIPP/E, CIPP/US, discuss the impacts the EU Data Act will have on connected device users and manufacturers and those who provide services related to them. The act will take effect in September 2025.Full story