CDP Institute

A German court has ruled sharing IP addresses with US-based servers for cookie consent is unlawful under Schrems II. The Wielsbaden Administrative Court found that a German university using a cookie preference service that shared IP addresses of end users with a company headquartered in the US was in violation because users could be identified by using the IP addresses and a key that is stored in the user’s browser.

The US and allies have elevated concerns about cybercriminals to the level of national security. This week, the US Cyber Command’s top general confirmed the military in cooperation with law enforcement is tracking ransomware groups. Canada imposed similar measures, and Ireland stepped up its activities following cyberattacks that disrupted healthcare in the country. Concerns have grown as infrastructure that promotes critical services, such as healthcare and pipelines, have been targeted.

With twin goals of safely harnessing the power of data for business and combating critical transnational privacy concerns, the White House and UK announced the joint prize challenge to develop privacy-enhancing technologies (PETs). The initiative is intended to encourage top minds to evolve new solutions to address global privacy issues ranging from financial crime to health data security.  First winners will be announced next year.

In the latest crackdown on Big Tech overreach, Italy’s anti-trust regulator charged Amazon $1.28 billion for alleged abuse of market dominance. Amazon has denied the claim that it leveraged its dominant position in the Italian marketplace to favor adoption of its own fulfillment service over others.

A DataDome survey conducted by Forrester found 84% of enterprise firms are prioritizing customer experience (CX) and app experience along with bot detection and management (79%). One key finding is that bots are being used to target high-profile events by using card, inventory and account fraud.

The family safety app used globally by 33 million people to track their children’s movements via cellphone, is in fact selling that data to more than a dozen data brokers according to former employees as reported by The Markup.

The Inrupt platform is intended to give individual consumers the ability to store and control their data via what the company calls Personal Online Datastores (PODs), which will connect with decentralized applications and allow users to decouple their data at will. This fully open and collective web (aka Web3) proposes a way to a new internet era including adaptation to regulatory controls.

This helps with privacy regulation compliance, since logs are often a major source of unintentional sensitive data exposure.

The list included movie review platform, Douban; karaoke service provider, Changba; and news aggregator Kankan News.

The UK’s Information Commissioner’s Office (ICO) has provisionally fined Clearview AI £17 million ($22.6 million) alleging it failed to inform UK citizens it was collecting billions of their photos and continuing to process their data. The UK and Australia had opened a joint investigation of Clearview last year, and Australia regulator has also issued a similar ruling.

The company has agreed to settle a class-action lawsuit alleging it shared personal information with third parties without user consent. Eligible users fall into two groups: the first are people who paid for a Zoom Meetings app subscription between March 30, 2016 and July 30, 2021; and the second is anyone who downloaded, registered, used or opened the Zoom Meetings App in the same date period.

Zimbabwe’s president has signed the controversial Cyber Security and Data Protection Bill into law. It seeks to provide data protection and will establish a new Data Protection Authority, but human rights activists fear it will stifle dissent by spying on what citizens send and receive on social media platforms.