The European Commission said it will take action if Hungary's government uses facial recognition technology to identify participants in LGBTQ+ demonstrations, Euractiv reports. The use of the recognition software during an ongoing protest, a provision of a recently passed law banning such activities, would be a violation of the EU AI Act, according to a Commission spokesperson.Full story
The Nigeria Data Protection Commission published its final directive on how to comply with the Data Protection Act. The guidance focuses on the scope of the law and data controller requirements for lawful personal data processing.Full story
New York Attorney General Letitia James announced a USD975,000 fine against insurance company Root, after the company's alleged lack of safeguards led to a data breach affecting more than 45,000 New York consumers' personally identifiable information.
France's data protection authority, the Commission nationale de l'informatique et des libertés, is launching a public consultation through 16 May on its draft recommendations for health care institutions' handling of electronic patient records.
Norway's data protection authority, Datatilsynet, released a video lecture discussing the use of AI tools in the workplace, and the potential privacy implications the technology could have for employees.
As part of its 25th anniversary, the IAPP will celebrate 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week, we highlight The New York Times technology reporter Kashmir Hill's groundbreaking investigative work calling attention to a range of privacy and digital issues.Full story
Thousands of comments have come in response to the White House's call for information on how to shape its AI Action Plan. IAPP Staff Writer Caitlin Andrews reports on the common themes raised among several submissions, giving a glimpse into what the U.S.'s future AI policy might look like.Full story
Luxembourg's Administrative Court issued a ruling upholding a 746 million euro EU General Data Protection Regulation fine issued by its National Commission for Data Protection against Amazon in 2021. The fine related to an alleged lack of transparency in data processing activities.
As the U.S. Health Insurance Portability and Accountability Act entered its "privacy era" in the early 2000s, WilmerHale Partner Kirk Nahra, CIPP/US, writes, there was also "a substantial expansion of thoughts around what health data is." Nahra opines on the hurdles to proper safeguards for personal health data with non-HIPAA protected health data on the rise and a lack of clarity around definitions.Full story
Switzerland's Federal Data Protection and Information Commissioner said the social platform X users have the right to request their public posts not be used to train the company's AI chatbot Grok. X has since introduced an opt-out option, which the commission said complies with data laws and closed the investigation.Full story