The European Commission will issue assessments for defining high-risk artificial intelligence products under the EU AI Act, relative to economic sectoral rules, Euractiv reports. The key dynamic under the assessments is that they will designate all AI-based cybersecurity tools and emergency services components in internet-connected devices as high risk.
The U.K. Information Commissioner's Office wrote a review of how an entity should think about data protection and information security. It goes over the main types of information security breaches seen in the industry. It is not intended to be guidance.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, released the results of an economic study aimed at understanding how the end of third-party cookies in Google Chrome will affect advertisers. The study examined what alternatives exist and how widespread the use of the cookies is within the industry.Full story
Spain's National Court Prosecutor's Office is investigating whether Meta's use of users' personal information to train artificial intelligence violates data protection laws, the Diario de Sevilla reports. The social media company said it would halt the practice for Facebook and Instagram users in Europe in mid-June in response to EU regulators' scrutiny.Full story
The Cabinet of Malaysia approved amendments to the Personal Data Protection Act 2010 to bring the regulation more in line with global standards, Free Malaysia Today reports. Some of the changes include mandatory notification of data breaches, more compliance needs for data processors and the requirement to appoint data protection officers.Full story
The Supreme Administrative Court of Sweden announced it fined Spotify SEK40 million for alleged data protection violations.
Communications company Twilio experienced a cyberattack that allegedly breached the phone numbers of 33 million users of the company's two-factor authentication app Authy, TechCrunch reports. The company claimed it is working to increase cybersecurity measures to protect user data.
The provisions of the EU-Japan Economic Partnership Agreement allowing for cross-border data flows entered into force 1 July. The provisions for data transfers in the agreement aim to facilitate commerce between the EU and Japan and promote the concept of "data free flow with trust."Full story
U.S. Sens. Ed Markey, D-Mass., Bill Cassidy, R-La., and Reps. Tim Walberg, R-Mich., and Kathy Castor, D-Fla., wrote a letter to Attorney General Merrick Garland urging an investigation into TikTok's alleged Children's Online Privacy Protection Act violations, MediaPost reports.
The European Commission plans to permit developers of general-purpose artificial intelligence models to write their own codes of practice for demonstrating their compliance with EU laws, Euractiv reports.