Technology companies, including Google, filed an amicus brief in the lawsuit of Dada v. NSO Group Technologies aiming to prevent the use of spyware. Google said it believes "the spyware industry presents a national security risk to the United States and clearly impacts the interests of Americans — and people around the world."Full story
The U.S. Federal Communications Commission and wireless service provider Tracfone agreed to a USD16 million settlement over allegations the provider inadequately protected its customers from three data breaches. The settlement includes terms to strengthen the company's application programming interfaces. FCC Enforcement Bureau Chief Loyann A. Egal indicated API security "is paramount and should be on the radar of all carriers."Full story
U.S. Senate Democrats led by Brian Schatz, D-Hawaii, sent a letter to OpenAI urging the company to explain its protocols for creating secure artificial intelligence technology, The Washington Post reports.
Luxembourg's National Commission for Data Protection published a report on how certain online service industries handled data transparency as they grew in popularity during the COVID-19 pandemic. The report is based on a survey of industries from 2020 to 2022 and includes CNPD recommendations relating to transparency.Full story
Italy's data protection authority, the Garante, announced it will launch an inquiry into the effects of software company CrowdStrike's recent global IT system outage. The investigation aims to determine possible implications outages have on the processing of personal data.Full story
The Office of the Australian Information Commissioner released a statement about the ransomware attack on software company MediSecure that impacted 12.9 million people. Australian Privacy Commissioner Carly Kind called for a revision of the Privacy Act to "ensure all Australian organisations build the highest levels of security into their operations and the community's personal information is protected to the maximum extent possible."Full story
The Organisation for Economic Co-operation and Development will pilot a monitoring program to evaluate the implementation process of the Hiroshima Process International Code of Conduct for Organisations Developing Advanced Artificial Intelligence Systems among G7 nations.
In the first installment of an IAPP three-part series unpacking platform liability laws related to artificial intelligence in the U.S. and the EU, IAPP AI Governance Center Fellow Uzma Chaudhry explores the evolution of laws in both jurisdictions and their potential application to generative AI.Full story
Poland's data protection authority, Urząd Ochrony Danych Osobowych, explained cloud service outages or temporary loss of data processing capabilities do not necessarily mean data has been breached. The UODO said service providers are required to contact the agency during an outage to "assess the risk in the context of access to data and the impact of a possible failure on the protection of people whose data is processed is also important."Full story
The Massachusetts Institute of Technology-led research outfit, the Data Provenance Initiative, issued a report claiming the previously abundant supply of training data for artificial intelligence systems is declining, The New York Times reports.