The Privacy Corner

Send a text

This Week in Privacy: AGs Block US Privacy Bill, China Blamed for UK Hack, Finnish Retailer Fined Heavily

US: Attorneys General from 15 states oppose the American Privacy Rights Act (APRA) due to concerns about preemption of state privacy laws.
UK: Government suspects China of a cyberattack on the military payroll system, exposing names and bank details.
Finland: Data Protection Authority fines online store €856,000 for requiring account creation and indefinitely storing customer data.

Send a text

This week's Privacy Corner newsletter covers a range of important topics:

• Generative AI and GDPR: Privacy advocacy group noyb filed a complaint against OpenAI, alleging its AI tool ChatGPT violates user privacy by generating inaccurate personal data. The crux of the issue lies in whether noyb expects OpenAI to fix inherent limitations of the technology and the applicability of GDPR in this case.
• Fines for Location Data Sharing: The FCC penalized four major US wireless carriers nearly $200 million for allegedly sharing customers' location data with third parties without proper consent. This action reflects growing regulatory scrutiny around data privacy, especially concerning sensitive information like location.
• Updated Health Breach Notification Rule: The FTC finalized amendments to the Health Breach Notification Rule, expanding its scope to cover health apps and unauthorized disclosures of health information, not just security breaches. This highlights the evolving privacy landscape in the US healthcare sector.

Send a text

In this week’s Privacy Corner Newsletter:

• Why a new US law that protects data from “foreign adversaries” extends beyond just TikTok.
• What the EDPB has planned for the next three years.
• How the ICO lost its appeal against Experian.

Send a text

In this week’s Privacy Corner Newsletter:

• European data protection authorities say “no” to (some) “consent or pay”.
• California’s privacy regulator says “no” to the new US federal privacy bill.
• The Federal Trade Commission (FTC) says “no” to telehealth provider Cerebral's alleged sharing of its users’ sensitive information.

Send a text

Privacy News Roundup by Robert Bateman

California just released stricter guidelines for businesses. They can't ask for unnecessary personal info when you request access to your data. 

Google agreed to delete billions of browsing records following a lawsuit claiming "Incognito Mode" wasn't truly private. 

The UK is prioritizing children's online privacy! They'll be checking social media platforms like Facebook & YouTube to ensure they comply with child protection laws. 

Send a text

In this episode of The Privacy Corner, we cover three major privacy news from this week:

First, WorldCoin, a digital identity and cryptocurrency project by Sam Altman, faces legal challenges in Portugal and other countries due to its biometric data processing practices. 

Second, the UK attributes a significant data breach of the Electoral Commission and an attempted cyber attack on its parliamentarians to China, raising concerns about national security. 

Third, the FTC releases a report showcasing its vigorous privacy and security enforcement activities in 2023, including notable cases and their focus on artificial intelligence, sensitive data, and algorithmic accountability.

00:00 Welcome to The Privacy Corner!
00:11 WorldCoin's Legal Troubles Across the Globe
04:26 UK's Electoral Commission Data Breach Blamed on China
06:46 FTC's Busy Year in Privacy and Data Security
09:10 Closing Remarks and Easter Wishes

Send a text

Join us for a special episode of the Privacy Corner as Robert Bateman, Data Privacy Expert, hosts Keir Lamont, Director for U.S. Legislation at the Future of Privacy Forum, on the My Health My Data Act, scheduled to take effect in Washington on March 31, 2024, for regulated entities.

This legislation stands as one of the most comprehensive and significant privacy laws enacted in the United States that explicitly aims to protect consumer health data.

Lamont shares his expert insights on how this law integrates into the broader framework of U.S. and state privacy regulations. The discussion deeply explores the application, intent, and enforcement of the My Health My Data Act.

Tune in to get an understanding of the law's potential impact on businesses, consumers, and the broader privacy landscape.

Send a text

This week's episode of The Privacy Corner, with Robert Bateman and sponsored by Privado AI, covers three major privacy-related developments. Firstly, the OCR's updated guidance on tracking technologies for HIPAA covered entities, emphasizing strict regulations to avoid disclosing Protected Health Information (PHI) to vendors like Facebook and Google. Secondly, the Belgian DPA's decision supporting the use of legitimate interests in AI model training by analyzing a case involving Bank Y's discount scheme and the handling of transaction data. Lastly, the ICO's enforcement notice to the UK Home Office for failing to conduct a proper Data Protection Impact Assessment (DPIA) for its migrant ankle tagging scheme, indicating serious privacy oversights in the process. Additional discussions include the scope and implications of these developments and an announcement on an upcoming special edition with Keir Lamont on the Washington My Health My Data Act.

00:00 Welcome to The Privacy Corner!
00:12 HIPAA's New Guidance on Tracking Technologies
05:33 Belgian DPA's Decision on AI Training and Legitimate Interests
10:12 UK Government's Ankle Tagging Scheme Under Scrutiny
11:51 Closing Remarks and Upcoming Special Edition

Send a text

In this episode of Privacy Corner, Robert Bateman discusses three major privacy-related developments. Firstly, the EU AI Act has been passed by the parliament, detailing the gradual enforcement of prohibited AI practices, general purpose AI system rules, and high risk AI system obligations. Secondly, Kentucky has passed a comprehensive privacy law, similar to Virginia's, encompassing data processing guidelines, consumer rights, and GDPR-inspired principles. Lastly, the European Commission has been sanctioned under data protection law for its use of Microsoft 365, highlighting issues in data processing agreements and data transfers. 

Send a text

In this episode of The Privacy Corner, Robert Bateman highlights the week's top privacy developments. He discusses a complex CJEU case related to the Transparency and Consent Framework in digital advertising, highlights bold statements from the FTC on privacy and data collection following significant enforcement cases, and examines the ICO's call for views on 'consent or pay' models. The episode covers the implications of these developments for data privacy and the responsibilities of companies in handling personal data.