Apple clarified its Siri data processing practices after agreeing to a USD95 million settlement over related user claims, Reuters reports. Apple said it has never sold data collected by Siri and "does not retain audio recordings of Siri interactions unless users explicitly opt in to help improve Siri, and even then, the recordings are used solely for that purpose."Full story
The New York Times reports on what to watch for in the U.S. Supreme Court's 10 Jan. hearing over the TikTok divestment law and the platform's potential ban in the U.S. If TikTok is banned 19 Jan., U.S.
Technology law firm ZwillGen announced the acquisition of boutique AI law firm Luminos.Law, bringing a unique approach to AI governance under the roof of the traditional digital compliance practice. IAPP Staff Writer Caitlin Andrews talks to both firms' cofounders about the merge and what the future of AI compliance may look like.Full story
The European General Court ordered the European Commission to pay nonmaterial damages to an individual over an unlawful EU-U.S. data transfer, marking new precedent regarding EU collective actions related to data protection claims. The Commission could appeal the case to the Court of Justice of the European Union.
The U.K. government will propose criminal penalties for individuals who generate nonconsensual sexually explicit deepfake content, as well as for those who install equipment to capture intimate nonconsensual images. Perpetrators would face up to two years in prison under the proposed offenses, which will be included within the Crime and Policing Bill that has yet to be introduced in Parliament.Full story
Carnegie Mellon University announced its new Privacy Technology and Policy part-time master's degree program. CMU Privacy Engineering Program co-Director Norman Sadeh said the program is intended to "accommodate the needs of professionals who want to remain in their careers while gaining advanced expertise in privacy technology and policy."Full story
The U.S. Cybersecurity and Infrastructure Security Agency published a fact sheet outlining the agency's Information Technology Sector-Specific Goals. The fact sheet contains both software development process goals, including separating all design environments during development, and product design goals, such as increasing the use of multifactor authentication. Full story
The New Jersey Division of Consumer Affairs published an FAQ document for businesses subject to the state's comprehensive data privacy law. The document features definitions for key terms, information on various business requirements and enforcement details. The law takes effect 15 Jan.Full story
Meta Oversight Board co-Chair Helle Thorning-Schmidt said she is concerned about the effect the company's removal of third-party fact-checkers could have on users, BBC News reports. Thorning-Schmidt said the move could allow users to post harmful content, including hate speech, that could "lead to real-life harm."Full story
Join IAPP Research and Insights Director Joe Jones for a LinkedIn Live 9 Jan. focusing on the draft rules for India's Digital Personal Data Protection Act. Trilegal Partner Rahul Matthan and Persistent Systems Senior Vice President and General Manager for Digital Governance Shivangi Nadkarni will join Jones to share insights for how organizations can potentially address DPDPA compliance efforts as the draft rules head for finalization.