The Dutch data protection authority has fined Uber $959.2 million for using automatic decision-making tech to deactivate drivers’ accounts if they received poor customer reviews.
Data Privacy
Posted inData Privacy
New U.K. data law takes full effect: What compliance officers need to know
The U.K. has amended its data protection rules with a sweeping law that aims to simplify compliance with existing privacy legislation, including the GDPR. However, compliance officers should be aware that the need to protect personal data remains paramount.
Posted inData Privacy
Meta reaches $18B settlement with states over child safety violations
Meta has agreed to pay up to $18 billion and overhaul teen safety features on Facebook and Instagram as part of a settlement with 47 states, the District of Columbia, and U.S. territories.
Posted inData Privacy
Data regulator issues privacy guidance over smart devices
Companies that manufacture smart devices are set to face increased scrutiny from data regulators following concerns that most consumers are unaware of how they collect, use and sell their personal information.
Posted inBest Practices
Beyond breaching privacy: The compliance risks of workplace surveillance
When organizations implement workplace surveillance tools, the conversation often begins with privacy. Questions about employee consent, data collection, retention periods, and legal compliance are essential. But as workplace monitoring technologies become more sophisticated, focusing exclusively on privacy risks often overlooks a much larger challenge.
Posted inData Privacy
India’s data privacy rules entering enforcement phases, raising compliance stakes for U.S. financial firms
India’s Digital Personal Data Protection Act soft enforcement period will end in November. With more active enforcement to follow, financial institutions that failed to comply could face penalties of up to $26.2 million.
Posted inBest Practices
Brazil’s National Data Protection Authority: How regulators investigate and enforce its data protection law
In June of this year, Brazil’s National Data Protection Authority opened an administrative enforcement proceeding against Claro, one of the country’s largest telecom carriers, over the sharing of customer data with Serasa, the largest credit bureau in Latin America.
Posted inData Privacy
GDPR 10 years on: Differences in regulatory enforcement still problematic
In the decade since the EU’s groundbreaking privacy legislation, the GDPR was approved, companies have faced increased scrutiny over the reasons they collect, retain, and share personal information, as well as the measures they take to ensure its security.
Posted inArtificial Intelligence
Companies risk violating data, consumer laws over agentic AI use
Companies are at increased risk of violating Europe’s tough privacy laws because boards have little awareness of the different types of AI or their inherent risks. While many organizations are more familiar with predictive and conversational AI tools, such as chatbots that carry little or no discernible risk, they have not grasped that generative AI—and especially agentic AI—are different animals.
Posted inData Privacy
Amazon fined $2.25M for failing to respond to identity theft victim requests
Amazon has agreed to pay $2.25 million for failing to provide records to customers who were victims of identity theft, as required by the Fair Credit Reporting Act (FCRA), the Federal Trade Commission (FTC) said. The fine, described in a proposed order, is the largest ever levied for an FCRA violation, the FTC said in a […]
