Your daily source for the most important privacy and data protection news from around the world.
FBI looks into the use of facial recognition programs
California approves protections against AI-generated deepfakes
Gov. Gavin Newsom, D-Calif., enacted bills to limit the use and subsequent harms of AI-generated deepfakes and likeness replication. Three bills signed by Newsom require social media companies to moderate the circulation of election-related deepfake content. Separately, Newsom approved two bills pro...
FCC secures $13M settlement with AT&T after cloud data breach
The U.S. Federal Communications Commission announced a USD13 million settlement with AT&T to resolve a data breach investigation involving customer data exposed in a contracted vendor's cloud environment. As part of the settlement, AT&T entered into a consent decree committing to enhance its...
India's draft DPDPA rules to receive further stakeholder consultation upon publication
India's draft Digital Personal Data Protection Act regulations will be subject to a month-long stakeholder consultation upon their release, Moneycontrol reports. The draft rules may cover potential exemptions for some children's data processing, responsibilities around obtaining parental consent and...
AEPD publishes guide on school-related mobile device use
Spain's data protection authority, the Agencia Española de Protección de Datos, issued guidance around mobile device use in an educational setting. The AEPD claimed smartphones and tablets could collect information that harms students' "right to non-discrimination and education; to private and famil...
South Korea's PIPC publishes guidance clarifying consent agreements
South Korea's Personal Information Protection Commission published guidance detailing when consent is needed for personal information processing. The Personal Information Protection Act allows for consumers' personal information to be collected without consent "when necessary for contract performanc...
Swiss-US Data Privacy Framework takes effect
The U.S. Department of Commerce announced the Swiss-U.S. Data Privacy Framework took force 15 Sept. for certified companies. Additionally, the International Trade Administration issued an updated FAQ on the adequacy agreement and compliance measures, including required updates to privacy notices reg...
The DNA of privacy and the privacy of DNA
With the rise in direct-to-consumer genetic testing comes a range of fresh privacy risks for individuals. Those potential issues are being addressed through state-level privacy legislation — both targeted and comprehensive — as well as federal enforcement actions. IAPP Principal Researcher, Privacy ...
Latvia's DSI advises on data protection for former employees
Latvia's Data State Inspectorate discussed companies' obligations to protect former employees' personal information. The DSI said employers have the right to retain an employee's work email address, however, the company must ensure their website no longer claims the employee works at the company, an...
Instagram introduces extensive privacy, safety features for underage users
Instagram introduced privacy features for users under age 18, including making private accounts the default setting, enabling overnight notification limits and additional parental supervision tools, The New York Times reports. Meanwhile, The U.S. House Committee on Energy and Commerce scheduled an 1...