CDP Institute

What a difference three years makes. IBM, which in 2020 told Congress it would stop offering “general purpose” facial recognition in response to concerns about resulting racial profiling, has just signed a $69.8 million contract with the UK to develop a national biometrics platform. The purpose is to provide facial recognition capability to government immigration and law enforcement – but IBM stated this is not in conflict the 2020 promises because it won’t be used for public surveillance.

New York is making it harder for advertisers to use geofencing tactics when near healthcare facilities, in an effort to protect the privacy of people using those facilities. Geofencing allows tracking within a particular geographic area. In this case, corporations are prohibited from creating a geofence within 1,850 feet of a hospital or health facility.

Uganda is pressuring business, government, legal, health, and financial organizations to register with its Personal Data Protection Office (PDPO) to comply with requirements of its data protection law. This follows a major breach last year which impacted its stock market’s data storage due to problems with its data management system.

In fact, Mozilla alarmingly reports you’ve got a data-brokering spy there too. Their survey of twenty-five top car brands found cars are by far the worst offenders (more than your phone, doorbell camera, or the fridge) when it comes to your privacy. Tesla was rated worst and was followed by Nissan, which gathers information including on sexual activity – but then Kia claims to do something similar. Once collected, 84% sell the data, and 56% are prepared to provide your data to law enforcement for just a polite ask. Check... Read More >

Barbie, Hot Wheels, American Girl and other top Mattel brands can be marketed to YouTube viewers under 13 without violating COPPA protection rules, as a result of the deal in which Mattel will leverage Pocket.watch’s child-friendly ad sales capabilities. Pocket.watch is one of the few third-party companies that has received YouTube’s approval to sell contextually targeted, COPPA-compliant ads.

It has been used in 70 or more class actions against companies like General Mills, Geico, and Chick-fil-A that were filed just in the past year.

This is due to use of tech providers, such as Meta/Facebook pixel and Google Analytics which enable online tracking.

This controversial aspect of the bill has been tabled pending a time when technology can meet minimum standards of accuracy in detecting only child sexual abuse and exploitation content.

This comes following a one-third increase in in-store crime and verbal abuse of staff and is part of a large £44 million (~ $55.6 million) security investment by the company in a range of security technologies and protocols.

A Polish researcher filed a detailed complaint alleging that OpenAI’s ChatGPT is breaching GDPR in multiple areas of the law, including transparency, data access rights and privacy by design. The issues raised propose that generative AI technology violates GDPR and EU privacy rules. Italy’s regulator raised similar concerns earlier this year, and their investigation is ongoing.

The New York Times has reported Meta may let EU users pay to block ads on Instagram and Facebook or opt for ad-based free versions. While the company was not willing to comment on the information, confidential sources indicated the company was considering different treatment of the EU in response to regulatory scrutiny there. Meta has also faced big fines and the prospect of additional changes from forthcoming digital regulations.

Jordan’s Parliament announces approval of the draft law on personal data protection which was amended by their Senate. The law allows, under supervision of the Central Bank, processing of personal data without informing the person whose data is being processed. It also allows processing of data for purposes the data was collected, but not disclosure to third parties.