CDP Institute

Germany’s highest civil court eased the standard of proof required for Facebook users who sought compensation for a massive leak in 2021 that compromised private data of half a billion people. This overrode the decision of a lower court that had ruled in favor of Meta, and said instead that it was sufficient for users to just show they were victims of the leak and they did not have to prove suffering.

Amazon’s Twitch was hit with a 1.75 million lira (US $58,000) fine by Turkey’s Personal Data Protection Board (KVKK) for inadequate security that resulted in a data breach, and for subsequently not reporting that breach.

“Never mind privacy,” is the message many think Mexico’s new government is giving as it moves to eliminate the INAI – the National Institute for Transparency, Access to Information and Protection of Personal Data. The plan to redistribute the agency’s responsibilities among other government agencies is a concern because it’s unclear how data will be protected and kept impartial.

Software company Privado’s State of Website Privacy Report’s 2024 survey found this to be a problem in the US and abroad. Results showed as high as 76% of the 100 most-visited US websites and a similar number in the UK and Europe, do not honor global privacy control (GPC) or opt-out consent requests. While this is often due to system issues and is inadvertent, the fact remains that the companies are not compliant and that’s a big legal risk.

Despite bipartisan support for banning users under age 16 from social media, an Australian parliamentary committee recommended giving users control to alter, reset, or turn off algorithms, but didn’t go so far as the age ban. Other recommendations included introducing a duty of care for platforms, providing more digital literacy education, and including young people in the process of helping to design any regulations that will impact them.

This is due to a business-friendly bill the governor signed recently, which stated that when biometric data has been improperly obtained, a business can only been charged for one violation, even if the data was obtained multiple times.