Your daily source for the most important privacy and data protection news from around the world.
OCR director discusses HIPAA rule on reproductive health data
FTC updates HIPAA Health Breach Notification Rule
The U.S. Federal Trade Commission updated the Health Insurance Portability and Accountability Act's Health Breach Notification Rule. The revised rule includes updated definitions to "underscore application" to health apps and "similar technologies not covered by HIPAA." Changes to the consumer and a...
Second global AI Safety Summit drawing less global interest
The second AI Safety Summit hosted virtually by the U.K. and South Korea in May is drawing less fanfare than the first summit last year, Reuters reports. Leading artificial intelligence policymakers from the EU and the U.S. are uncertain about attending the 21-22 May summit, while Canada and the Net...
UK CMA issues 2024 first quarter report on Google's Privacy Sandbox
The U.K. Competition and Markets Authority published its 2024 first quarter report on Google's efforts to implement the Privacy Sandbox. The report stated Google met all commitments made to the CMA, although "further progress is needed by Google to resolve our competition concerns ahead of (cookie) ...
Brazil's ANPD authorizes Security Incident Communication Regulation
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced the authorization of the Security Incident Communication Regulation, which aims to strengthen cybersecurity practices and increase transparency. The RCIS requires organizations to report security incidents th...
GDPR complaint filed over alleged AI chatbot 'hallucination'
An alleged "hallucination" by OpenAI's ChatGPT is the basis of a privacy complaint to Austria's Data Protection Authority, Politico reports. Privacy rights group NOYB claimed the chatbot produced the wrong birthday of the group's founder, which could be a violation of the EU General Data Protection ...
CNIL seeks feedback on potential health care data standards
France's data protection authority, the Commission nationale de l'informatique et des libertés, will begin a consultation toward "updating and creating new standards" for health data processing. The CNIL hopes to obtain feedback from stakeholders involved in health care research or data processing "...
UK enacts security rules for connected devices
The U.K. enacted new security rules featuring a "raft of transformative protections" related to Internet-of-Things devices and other connected products. Covered entities will be required to ensure strong device passwords while providing clear consumer incident reporting instructions to "increase the...
Health care company's software allegedly breaches 13M customers' data
Health care company Kaiser Permanente's online tracking software allegedly shared the personal data of 13 million customers with third parties, The Record reports. The company is currently facing a class-action lawsuit over its previous use of tracking technology.Full story...
Data broker allegedly publishes German passport information
A data broker published the sensitive passport information of more than 60 German residents online, Netzpolitik reports. Germany's State Commissioner for Data Protection of Lower Saxony said if the data broker could not prove it obtained consent from the data subjects then "it would be reasonable to...
Recent Comments