Issue 223

  • An unknown number of UK military personnel’s personal information has been accessed in a significant data breach.
  • Spain’s data protection authority, the AEPD, issued joint guidance with three regional DPAs regarding entities seeking to deploy Wi-Fi tracking technology.
  • Germany’s DSK issued guidance stating generative artificial intelligence will create multiple data privacy issues under the EU GDPR.
  • Trade union leaders from 11 European countries asked respective data protection authorities to examine Amazon’s employee monitoring practices.
  • The U.S. District Court approved Google’s USD 62 million privacy settlement, awarding USD 42 million to advocacy groups and USD 18 million to attorneys.
  • The U.S. FTC announced approximately 800,000 consumers will be notified of refunds from a USD 7.8 million privacy settlement.
  • The U.S. Department of State is expected to announce updates to its international cyberspace and digital policy strategy.
  • South Korea’s Personal Information Protection Commission launched an investigation into Worldcoin after it collected iris and facial scans at 10 locations.
  • Singapore’s Personal Data Protection Commission issued guidelines for the use of personal data in artificial intelligence-powered automated decision systems.