Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, approved a rule clarifying requirements around data protection officers. The regulation covers the required disclosure of a DPO's identity and contact information, their duties as a data processing agent, and potential conflicts of interest.Full story
Italy's antitrust regulator, the Autorità Garante della Concorrenza e del Mercato, opened an investigation into Google and parent company Alphabet alleging unfair commercial practices related to users' data, Reuters reports.
The Court of Justice of the European Union upheld the European Commission's decision to label TikTok parent company ByteDance as a gatekeeper under the Digital Markets Act, Euractiv reports. The gatekeeper status means ByteDance must comply with its additional DMA requirements by next March.
Denmark's data protection authority, Datatilsynet, indicated more than 700,000 people's phone numbers and their message contents have been copied after seeing an increase in SMS scam reports since 8 July. Datatilsynet said hundreds of notifications of security breaches have been coming in and advised people to be critical of messages asking them to click on a link.Full story
European Commission President Ursula von der Leyen was elected for a second five-year term, Reuters reports. The Commission has rolled out a wide-ranging digital rulebook under von der Leyen, including the EU Artificial Intelligence Act, the Digital Services Act and the Digital Markets Act.
Approximately 12.9 million Australians who used MediSecure's prescription delivery service March 2019 to November 2023 had their information stolen by a third-party actor, the company announced. The company said it is cooperating with relevant authorities, but urged against searching for the data on the dark web and "encouraging the criminal activity that has led to this Incident and may further the potential harm to Australians impacted."Full story
A class-action lawsuit was filed against telecommunications provider AT&T after its reported data breach affecting nearly all of its customers, The Dallas Morning News reports.
The California Privacy Protection Agency Board is again holding off on commencing the formal rulemaking process for proposed regulations on automated decision-making technology, risk assessments and cybersecurity audits. Board members indicated during their last meeting they need more time to discuss the proposed scope and economic impact of the ADMT rules in particular. IAPP Staff Writer Caitlin Andrews reports on the debate over proposed ADMT rules.Full story
Latvia's Data State Inspectorate opened a public consultation on draft guidelines for conducting data protection impact assessments. The guidelines outline when a DPIA is required and the process for carrying them out. Stakeholders are invited to give their opinions on the guidelines through a questionnaire available until 10 Sept.Full story
U.S. Sens. Richard Blumenthal, D-Conn., and Josh Hawley, R-Mo., wrote a letter to AT&T CEO John Stankey seeking information on the unauthorized access to its Snowflake cloud platform resulting in the theft of approximately 109 million user accounts, Reuters reports. "The recent AT&T disclosure … raises concerns that we still do not know the full scope or impact of the campaign targeting Snowflake customers," the senators said in the letter.