CDP Institute

The company’s AI-powered security platform helps security teams at companies manage and secure data and helps assess security and privacy risks.

Germany’s highest civil court eased the standard of proof required for Facebook users who sought compensation for a massive leak in 2021 that compromised private data of half a billion people. This overrode the decision of a lower court that had ruled in favor of Meta, and said instead that it was sufficient for users to just show they were victims of the leak and they did not have to prove suffering.

Amazon’s Twitch was hit with a 1.75 million lira (US $58,000) fine by Turkey’s Personal Data Protection Board (KVKK) for inadequate security that resulted in a data breach, and for subsequently not reporting that breach.

“Never mind privacy,” is the message many think Mexico’s new government is giving as it moves to eliminate the INAI – the National Institute for Transparency, Access to Information and Protection of Personal Data. The plan to redistribute the agency’s responsibilities among other government agencies is a concern because it’s unclear how data will be protected and kept impartial.

Software company Privado’s State of Website Privacy Report’s 2024 survey found this to be a problem in the US and abroad. Results showed as high as 76% of the 100 most-visited US websites and a similar number in the UK and Europe, do not honor global privacy control (GPC) or opt-out consent requests. While this is often due to system issues and is inadvertent, the fact remains that the companies are not compliant and that’s a big legal risk.

Despite bipartisan support for banning users under age 16 from social media, an Australian parliamentary committee recommended giving users control to alter, reset, or turn off algorithms, but didn’t go so far as the age ban. Other recommendations included introducing a duty of care for platforms, providing more digital literacy education, and including young people in the process of helping to design any regulations that will impact them.

This is due to a business-friendly bill the governor signed recently, which stated that when biometric data has been improperly obtained, a business can only been charged for one violation, even if the data was obtained multiple times.

South Korea’s Personal Information Protection Commission fined Meta for collecting sensitive information on 980,000 Facebook users and sharing it with ~4,000 advertisers in violation of the Personal Information Protection Act (PIPA). This included data on political views and sexual orientation.

Despite significant opposition from human rights and business groups, a UN committee has accepted cybercrime treaty language that would allow investigative data to be shared between countries, make extradition easier, and embolden authoritarian regimes to spy on and prosecute citizens. The Biden Administration is reported to approve as well.

There are new laws evolving in SE Asia: Indonesia’s Personal Data Protection (PDP) law is now fully in force; Malaysia has passed changes to its Personal Data Protection Act (PDPA) that should come into effect soon; and Vietnam’s Personal Data Protection Law (PDPL) is due to be adopted in May.

Game platform Roblox, which has repeatedly been criticized for being lax protecting kids, has made a series of updates to increase safety for users under age 13. This includes setting the default for young children to no longer be able to play, search or access unrated experiences. However, unfortunately, they’ll still find violent and/or crude content.

This is now in violation of the country’s Digital Private Data Protection Act (DPDP).