Incogni's Mariam Volobueva, Brenden Arakaki and Adam Choliński emphasize that protecting employees' personal information is a way to reduce spear phishing risk for organizations. They discuss why employee data is the "easiest entry point" for those attacks, while outlining the lines of defense available to companies.Full story
The EU AI Office released the second draft of the General-Purpose AI Code of Practice, which incorporates feedback received on its first draft published 14 Nov. The second draft looks to provide a "future-proof" code that will be critical for AI models released after 2 Aug. 2025, which will be subjected to new rules for general-purpose AI. The third draft of the code is anticipated to be released the week of 17 Feb.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, issued guidance detailing data protection officers' obligations under the General Data Protection Law. The guidance aims to "indicate good practices for personal data processing agents" to ensure consumers' data is secure and organizations are compliant with the LGPD.Full story
Companies are increasingly looking to streamline compliance efforts across multiple jurisdictions while proactively seeking to minimize friction to remediate potential compliance gaps. The recent release of BigID's Data Activity Monitoring and Compliance Dashboard tools aims to help solve both concerns. IAPP Staff Writer Alex LaCasse spoke with BigID Chief Marketing Officer Sarah Hospelhorn about the launch. Full story
The Wall Street Journal reports on the reluctance compliance executives have in regards to using AI-integrated software to aid digital regulatory compliance.
The California Privacy Protection Agency announced increases in California Consumer Privacy Act civil penalties, which are allowed by law and are indexed to the state Consumer Price Index. Businesses will now be subjected to a USD26.6 million penalty of their gross revenue for CCPA violations, which is up from USD25 million. Monetary damages, administrative fines and civil penalties also increased by modest amounts.Full story
The U.K. Information Commissioner's Office will not condone Google's plan to lift restrictions on user fingerprinting applied to advertising products in 2025.
Wired reports on the expansion of Section 702 of the U.S. Foreign Intelligence Surveillance Act contained within the National Defense Authorization Act. The bill passed through the Senate this week with language increasing the number of businesses that are considered "electronic communications service provider," which allows the government to compel them to install wiretaps on its behalf.Full story
The U.S. Supreme Court agreed to take up a First Amendment challenge related to a law forcing TikTok to divest from its Chinese parent company or face a ban in the U.S., The New York Times reports. The case faces a short timeline as justices are set to hear oral arguments 10 Jan. 2025, just days before the 19 Jan. deadline for a TikTok sale.Full story
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, released responses to its call for information on deceptive or harmful AI systems. In the responses, organizations noted concerns about AI systems that may collect sensitive or high-risk information and sought clarity surrounding these systems.Full story