CDP Institute

The UK Information Commissioner’s Office (ICO) confirmed LinkedIn will no longer use UK user data to train AI. The company confirmed it also won’t use data from the European Economic Area or Switzerland, at least “until further notice.” Elsewhere, users must make the change manually by going to their Data & Privacy setting and toggling “Off.”

Genetic testing company 23andMe agreed to pay $30 million for a class action that resulted from a major data breach in 2023. The company, which has struggled financially and unsuccessfully tried to go private earlier this year, was alleged to have not properly notified customers of the breach. This included ethnic groups that were singled out for having their data taken.

Texas squared off with the US Department of Health and Human Services (HHS), and is looking to make it legal to chase down women’s medical records (think abortion) if they cross the state line. Currently, this is illegal because of the Biden administration privacy update to the Health Insurance Portability and Accountability Act (HIPAA). But, if this first-of-its-kind-vigilante-style Texas law were to go into effect, it would set a precedent for the dozen or so other states determined to take back abortion rights.

In a major report on the “privacy practices” of Social Media and Video Streaming Services (“SMVSSs”), the US Federal Trade Commission (FTC) found the companies we so enjoy for providing companionship, videos, music, photos, games and more are not on their best behavior, but are surveilling us more than most of us imagine. Forget privacy in our relationships, religion, healthcare, thoughts, desires, or emerging ideas. In fact, there’s lots the companies “know” that are not even true, but believed based on inferences, projections and mistaken interpretation. But who cares…? Well,... Read More >

California’s governor just signed the Protecting Our Kids from Social Media Addiction Act, making it illegal for online services and apps to knowingly provide an “addictive feed” to a minor. What is an addictive feed? It can be when a website, online service, or app shares multiple pieces of media-generated or user-shared information that’s then provided to a user to persuade them. It may be based on information they’ve given, or gathered surreptitiously from their device, but will not be allowed, unless specific conditions are met, or consent is given.

Nigeria’s Federal Ministry of Youth Development and the Nigeria Data Protection Commission (NDPC) have signed an agreement to train and certify 5,000 young people as data protection professionals. Good idea – any other takers?

AT&T also agreed to boost its data governance practice to keep closer watch on its suppliers.

This comes after complaints were received that its hashing method wasn’t working.

Politico introduces Andrew Kingman, the lobbyist/“man behind the curtain” who made that and makes other business-unfriendly US laws disappear at the behest of titans like Amazon, Google, Meta, Target and General Motors.