The EU Artificial Intelligence Act will be important and consequential to the governance of AI in the EU and worldwide. Covered entities must begin to understand the potential impacts of the act as provisions are phased in and implemented over the coming months.
The European Commission adopted its second report on the state of EU General Data Protection Regulation implementation. The report discusses application of the law since its entry into force, building off the inaugural implementation report in 2020. The Commission cited and outlined potential steps to improve "robust enforcement," data protection authority support, and "consistent interpretation and application."Full story
The U.S. National Institute of Standards and Technology published a guide for small businesses to begin implementing the NIST Risk Management Framework. The document serves as an introduction for organizations to design an information security and privacy risk management program.Full story
The U.S. Federal Trade Commission's Office of Technology discussed the agency's perspective on companies hashing personal data. According to FTC staff, hashing data creates difficulty around reidentifying the original data subject, however, it is misleading for companies to claim hashing personal information makes it anonymous.Full story
A Consumer Reports survey found U.S. citizens are concerned about algorithmic decision-making in certain industries, including health care and housing. The survey collected responses from 2,022 individuals and found respondents have concerns about the use of AI for important decisions and possible inaccuracies with the technology.
India's Ministry of External Affairs announced a collaboration between India and the U.K. on a Technology Security Initiative as part of the India-U.K. 2030 Roadmap.
CrowdStrike's outage could cost U.S. Fortune 500 companies an estimated USD5.4 billion combined in insured losses, the Guardian reports. The company said it is working to bolster its cybersecurity standards after a faulty update led to a global IT outage.Full story
U.S. national security considerations involving the transfer of sensitive personal data to adversarial countries could present an opportunity to forge a multilateral treaty on cross-border data transfers, Baker McKenzie Privacy and Security Global Chair Brian Hengesbaugh, CIPP/US, writes. With the U.S.
In an op-ed for Forbes, SailPoint founder and CEO Mark McClain said businesses should focus on creating a foundational cybersecurity plan instead of building its security around individual regulations. McClain said, "the better job an organization does of establishing a strong security baseline, the easier it will be to make minor adjustments."Full story
The U.K. Office of Communications fined TikTok 1.875 million GBP for alleged inadequate responses to a formal inquiry seeking information on parental control features. TikTok originally responded to OfCom's request for information 4 Sept. 2023, but revised their submission in December 2023 after finding the data it provided was inaccurate.