The Committee on Foreign Investment in the U.S. announced a USD60 million settlement with wireless provider T-Mobile to resolve allegations it did not "promptly" report unauthorized access to sensitive data, as mandated in its commitments to the U.S. government when it merged with rival carrier Sprint in 2018, The Wall Street Journal report. The CIFUS is a regulatory panel that reviews commercial agreements that could pose U.S.
The EU Artificial Intelligence Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
Sweden's data protection authority, Integritetsskyddsmyndigheten, established an accreditation process and rules for certifying bodies under the Board for Accreditation and Technical Control. The new system licenses certifications around data processing compliance in Sweden and the European Economic Area.Full story
The U.S. Department of Justice is weighing its options over how it will punish Google after being found to have violated antitrust laws in federal court, The New York Times reports.
Join the IAPP 27 Aug. for a free web conference dedicated to reviewing recent international developments and trends impacting cross-border data flows. Hunton Andrews Kurth Center of Information Policy Leadership Director for Privacy and Data Policy Natascha Gerlach, CIPP/E, and Atlantic Council Nonresident Senior Fellow Kenneth Propp join IAPP Research and Insights Director Joe Jones to discuss the emerging practices for navigating and complying with these global developments.Full story
New York Attorney General Letitia James issued a USD4.5 million fine to Enzo Biochem over alleged inadequate safeguards that led to a ransomware attack affecting 2.4 million patients. The company agreed to strengthen its data security practices and will implement cybersecurity policies to protect patients' personal information. Full story
Organizations may be struggling to navigate the use of artificial intelligence within corporate environments given the technology's potential risks, The Wall Street Journal reports. With the rapid growth of AI, board members are "educating themselves on how generative AI can affect a company's profit — potentially boosting productivity but also bringing risks that will be difficult to assess."Full story
The Center for Democracy and Technology published a white paper on how to help researchers and policymakers understand general-purpose artificial intelligence systems use cases and create more evidence-based policies. The paper argued three methods can be used to inform the gap — data donations, transparency reports and direct access to log data — but each has its own benefits and challenges. Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard.
The Philippines' National Privacy Commission updated its guidelines for processing sensitive personal data under the Data Privacy Act of 2012. The changes reflect new permissions sensitive data processing and when processing is permitted for data used in court proceedings.Full story
The U.S. National Institute of Standards and Technology released its first three sets of encryption algorithms designed to resist a quantum computing attack. NIST is also evaluating two other sets of algorithms that could potentially serve as backup encryption standards. Meanwhile, the U.K.