Issue 262

  • Germany’s Interior Ministry urged the U.S. to honour its commitments under the EU-U.S. Data Privacy Framework amid concerns of a possible withdrawal.
  • Meta Platforms, Inc. is planning to restart AI training using publicly available data from EEA Facebook and Instagram users, including historical and future posts, from users over 18 years old.
  • The ICO fined DPP Law Ltd  GBP 60,000 for inadequate data security after a June 2022 cyberattack stole 32GB of data and exposed client information on the dark web.
  • The Dutch data protection authority (AP) announced that it had warned 50 organizations by letter about their misleading cookie banners.
  • EDPB published an opinion on the draft decision by the CNIL regarding Lexing GDPR certification criteria, concluding it does not provide appropriate safeguards for international data transfers.
  • A whistleblower disclosed to Congress that the Department of Government Efficiency had allegedly been given access to sensitive agency data.
  • Sen. Markey and Rep. Castor urged the FTC to open an investigation into new allegations that Meta violated COPPA.
  • AG Platkin sued messaging app “Discord” for unlawful practices that expose nj kids to child predators and violent, sexual content.
  • A U.S. District Court permanently struck down Ohio’s age verification law in NetChoice v. Yost, ruling it unconstitutional for violating online privacy and free speech rights.
  • The People’s Bank of China and other authorities published Guidelines for Promoting and Regulating Compliance of Cross-border Data Flows in the Financial Industry.