With enforcement of India's Digital Personal Data Protection Act on the horizon, policymakers will be confronted with the fact that the law's supplementary rules contradict existing law. GE HealthCare Data Privacy Analyst Ankita Kaw, CIPP/US, outlines how the DPDPA sits at odds with the Right to Information Act, Reserve Bank of India Regulations, Telecom Regulatory Authority of India Act and the Information Technology Act.Full story
The Security Incident Communication Regulation under Brazil's General Data Protection Law clarifies what constitutes a cybersecurity incident under the law.
Spain's data protection authority, the Agencia Española de Protección de Datos, highlighted its work on protecting minors from digital harms. Those efforts have included priority action on removing sexual or violent content posted without consent and a working group which resulted in legislation raising limitations around data processing of minors up from age 14 to 16.Full story
The U.S. Court of Appeals for the District of Columbia Circuit denied ByteDance's request to stop the potential U.S. ban of its social platform TikTok, MediaPost reports. Meanwhile, members of the U.S. House Select Committee on the Chinese Communist Party sent a letter to Google and Apple urging the companies to prepare to remove TikTok from its app stores if the platform is banned 19 Jan.
A cyberattack on Rhode Island's social services platform, RIBridges, breached the personal data of residents that applied for government assistance, The New York Times reports. Gov. Dan McKee, D-R.I., said the state is investigating the incident to determine how many residents were affected and the information potentially breached.Full story
The Netherlands' data protection authority, Autoriteit Persoonsgegevens, launched a two-week campaign to educate citizens on the potential risks cookies pose to their personal information.
The U.S. Federal Trade Commission's Office of Technology and Division of Privacy and Identity Protection discussed how companies training AI, or engaging in targeted advertising and commercial surveillance, can create pools of personal information that bad actors can target.
Thailand's Personal Data Protection Commission extended the registration period for its Personal Data Protection Assessment System to 18 Dec. The program aims to help organizations ensure compliance with the Personal Data Protection Act while offering suggestions on how to bolster data security.Full story
The Saudi Data and Artificial Intelligence Authority is seeking feedback on its rules on data accreditation and auditing for data protection professionals. Interested parties have until 11 Jan. 2025 to weigh in.Full story
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced it conducted an inspection of 20 businesses that allegedly did not list contact information for its data protection officer as required by the General Data Protection Law. The ANPD also inspected companies that offer ineffective channels for data subjects to exercise their rights.