CDP Institute

Mexico made changes to its privacy regulations, including the General Law on Transparency and Access to Public Information (“LGTAIP”), the General Law on the Protection of Personal Data Held by Public Sector Entities (“LGPDPPSO”), the Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”), and Article 37, Section XV, of the Organic Law of the Federal Public Administration (“LOAPF”). This includes limiting the authority of the LGPDPPSO to review decisions of oversight bodies, creating a National Registry of Data Controllers, and adding the LFPDPPP, which retains... Read More >

Strange when a million seems small in comparison to other news, but scary if you’re one of the more than one million New York University applicants whose admission data, including location, contact information, grades, race, and citizenship status was hacked. The hacker claimed to be part of “Computer Niggy Exploitation” a group that had hacked and leaked information on 7 million University of Minnesota students.

Now they can’t block having their voice recordings automatically sent to the Amazon cloud for processing, unless they want to convert their Echo device into an expensive paperweight.

A major addition if accepted is that sensitive data would include a consumer’s neural data.

Originally described as a registry of pregnant women “at risk” of abortion, the revised version is now positioned as connecting pregnant women who might consider having an abortion with prospective adoptive parents. Cost to the state is estimated at potentially more than $40 million in 2026.

23andMe has filed for bankruptcy and its customers are being advised to request immediate deletion of their data to avoid their genetic data being sold off. The company, which holds data of ~7 million customers, suffered a massive breach in 2023 and faced a subsequent loss of consumer trust which began a spiral fall.

California is intent on companies respecting and responding adequately to consumer privacy rights requests as outlined in the California Consumer Privacy Act (CCPA), and Honda Motor Company just received a $632,500 administrative fine for not complying. Reasons included the company requesting excessive information and verifications to submit a deletion request.

The Genomic Data Protection Act has been proposed in the US Senate in a bilateral move to protect genomic information, such as DNA, RNA and genetic data. This federal initiative follows several states, including Nevada and Virginia, having passed their own genetic data protection laws.

A Norwegian man curious to find out what, if anything, ChatGPT knew on a very familiar topic – researched himself. And it did in fact know more than he felt it needed to about himself, his family and location – but what stopped him in his tracks was it also erroneously claimed he was a convicted criminal, who’d killed several of his children and that he’d been in prison. All possible when ChatGPT hallucinates as it sometimes does – and terrifying for us in the real world!

Federal and state laws were broken, since PSEA took 8+ months to notify them.