The Michigan Senate recently passed the Reproductive Health Data Privacy Act, Michigan Public Radio reports. The bill would prevent health and fitness apps from collecting or selling user data without obtaining specific consent from users and also bar companies from sharing the user data with the government unless required by law or the data subject requests the company does so.
European Data Protection Board Chair Anu Talus wrote a letter to European Commissioner for Justice Michael McGrath regarding the Commission's January report that reviewed data adequacy findings for 11 jurisdictions, including Canada, Israel and New Zealand. Overall, Talus said that while the EDPB "acknowledges the extensive work" by the Commission, the EDPB also offers it some "observations on the methodology of its adequacy assessment and certain aspects that could have been described in more detail" in the report.
MediaPost reports a lawsuit claiming Google illegally acquired millions of pictures of people's faces without consent is moving forward under the Illinois Biometric Information Privacy Act.
Despite provisions of the California Age Appropriate Design Code Act being struck down on constitutional grounds, Connecticut and Maryland successfully enacted similar children's online safety legislations that have yet to be challenged in court.
The IAPP Research and Insights Team offers a snapshot look at the IAPP Privacy and Governance Report 2024. The infographic presents a window into key data points from the report, such as performance and significance of privacy governance within organizations.Full story
The NASSCOM Responsible AI Hub released a guide for developing AI responsibly in India. The guide includes a voluntary framework for identifying and preventing risks in systems.
The U.S. Health and Human Services Office for Civil Rights fined Children's Hospital Colorado USD548,265 over alleged violations of the Health Insurance Portability and Accountability Act Privacy and Security Rules.
The U.S. Consumer Financial Protection Bureau invoked its authority to supervise entities with risks to consumers as it established oversight of Google's payment tool. The process includes a confidential exam aimed at helping identify potential law violations.
Texas Attorney General Ken Paxton issued formal warnings to four companies for potential violations of the state's Data Privacy and Security Act for allegedly selling sensitive customer data without consent and without informing customers of the practice, The Record reports.
Politico reports on how the U.K. is assuming global leadership on AI safety. Current and former government representatives, technology company insiders and other stakeholders detailed to the news outlet how the U.K. is "building up the state's ability to assess the risks posed by powerful artificial intelligence," including cyberattacks.Full story