The European Data Protection Board updated guidelines for Article 48 of the EU General Data Protection Regulation regarding EU organizations transferring personal information to a third country, opening the changes to public consultation through 27 Jan. 2025. The updates clarify judgments requiring the transfer of data from the EU made in a third country are not automatically enforceable in the EU.
University Grenoble Alpes law professor Théodore Christakis analyzes what could be the most effective regulatory approach to address data subjects' concerns regarding AI model hallucinations, citing the approaches proposed by the Hamburg Commissioner for Data Protection and Freedom of Information and the U.K. Information Commissioner's Office.
Join the IAPP for a LinkedIn Live 5 Dec. exploring the European Commission's new college of commissioners and potential digital regulatory initiatives. IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, will speak with Bird & Bird Regulatory and Public Affairs Director Francine Cunningham and Mazagan Brussels Office Director Mathilde Renou about how the makeup of the new Commission will impact digital governance policymaking.Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, proposed using mature development methodologies, such as machine learning and neural networks, to train AI systems. The AEPD's report details the relationship between various datasets used to train AI systems and potential data security implications. Full story
The U.S. Consumer Financial Protection Bureau proposed a rule to prevent data brokers from selling citizens' sensitive personal information. The rule would designate data brokers as "consumer reporting agencies" subject to the requirements of such entities under the Fair Credit Reporting Act when selling certain sensitive personal information, such as Social Security numbers and financial information.
The Office of the Information and Privacy Commissioner of Ontario discussed perceived problems with public-sector AI rules in the recently passed Strengthening Cyber Security and Building Trust in the Public Sector Act.
A lawsuit filed in the Superior Court of Santa Clara County in California claimed Apple required employees to install software on personal devices that allowed the company to monitor employees' information through their iCloud accounts, Reuters reports.Full story
The Computer and Communications Industry Association published its 2024 State Online Safety Landscape report detailing privacy implications of U.S. states' efforts to introduce content moderation and age verification legislation.
MediaPost reports prescription delivery service company GoodRx agreed to pay USD25 million to settle claims it allegedly shared consumers' health data with advertisers without consent. The settlement still needs to be accepted by a U.S. District Court judge; the agreement comes after the Federal Trade Commission brought similar charges against the company, which were also settled.Full story
Australia's social media ban on children under 16 represents an attempt to "mitigate negative impacts and harm to children through social media use by limiting their exposure during critical stages of their development," SEEK Senior Advisor, Privacy and Data, Ilana Singer, CIPP/E, CIPM, CIPT, writes.