CDP Institute

Singapore’s Personal Data Protection Commission (PDPC) has added stricter privacy controls to its Personal Data Protection Act 2012 (PDPA), including making breach notification mandatory, and elevating data mishandling to a criminal offense. Financial penalties of up to $1M Singapore or 10% of a company’s annual gross income are under consideration for 2022.

In a Pathwire survey of 1,000 companies throughout EMEA and North America, 62.4% reported not being completely compliant with data regulations and 24.4% of respondents didn’t know which regulations applied to them. And, while cost of non-compliance can be substantial, only 11.6% reported spending more than $5,000/yr. on new technology in this area.

A high-ranking Catholic priest in the U.S. has resigned following publication of a story outing him using location data from hookup app, Grindr. This raises ethics questions both about the easy availability of cellphone data that tracks daily movement and about publicly using information that is obtained to impose moral judgement.

The non-profit organization for self-regulatory advertising, the Network Advertising Initiative (NAI), has launched the beta of its consumer choice mechanism for email-based Tailored Advertising, designed to expand the scope of their 2020 Code of Conduct. This will enable member companies to create encrypted versions of consumer email addresses that can be used for opt-outs from email-based IDs. A Digiday article published in response to the announcement has questions on the approach. Read More Read More – Digiday

The Dutch Data Protection Authority has found TikTok in violation of children’s privacy for not providing Dutch translation of their privacy statement for Dutch users. There are an estimated 3.5M TikTok users in the Netherlands, most of whom are young children. By not providing the consent information in their own language, the company was deemed to not have provided clear description of what would be done with the data it collects, so was seen as not adequately protecting children as required under GDPR.

The free forwarding service will strip trackers, won’t save sender or recipient addresses, and will allow users to generate randomized addresses.

The PII Data Privacy Vault provides fine-grained access control to data based on roles, policies, or attributes and is delivered as a simple API.

The new workflow solution enables users to encrypt data before it leaves the browser and then the system matches results with Infutor’s own information.

The platform enables Fortune 500 companies and others that use cloud tools to ensure data will not be exposed to the cloud provider.

The apps used by users and drivers were collecting personal information so were in violation of relevant laws and regulations.

The RiskIQ threat intelligence services will be integrated into Microsoft’s flagship security offerings.

The UN’s Special Rapporteur on the right to privacy presented his guiding principles to the Human Rights Council, including support for evolving children’s autonomy and independence in bearing their own rights to privacy. The Holy See disagreed, emphasizing the oversight role of parents. The UNSR called for education starting at a young age to make kids tech & privacy savvy.