CDP Institute

This, according to the US Department of Health and Human Services Office of Civil Rights (OCR)’s newly published Breach Report.

It requires financial institutions to allow consumers to transfer information to other providers more easily at will.

No need to consent (per your content) – X has self-granted it and beginning next month can use anything you post to train their AI. With just a little rework of ‘terms of service’ verbiage, snap, it’s theirs! Going forward all you need to do is submit, post and display content on or through X’s services, and you’ll have granted world-, non-exclusive, royalty-free license rights to them. Any dispute you or others may have afterwards will be served up to an X-friendly court in Texas.

Kroger’s adoption of new electronic shelf labels (ESLs) has consumers and some lawmakers concerned the technology could be used in the future to custom-price groceries to individual shoppers. The company claims instead its focus continues to be on pricing competitively to benefit its customers, but there’s concern that dynamic or surge pricing tactics could also be used.

The EU’s Network and Information Security Directive 2 (NIS2), the law governing how businesses bolster their cyber resilience, is now enforceable. Problem is, most EU member states aren’t set up for it. This is a concern because it applies broadly to organizations that operate within the EU in key industries such as finance, healthcare and technology.

As if concern over social media impact on teen mental health weren’t enough, now organized groups have been found engaging in ‘sextortion,’ a form of blackmail in which teens are persuaded to share nude or intimate photos and then they’re blackmailed into paying to keep the images private. Instagram, which has faced criticism over making their feed addictive to young users, has added new features to protect against ‘sextortion,’ but critics complain that its parent company, Meta, does not go far enough to protect young users.

Specifically, plans are to: 1) monitor Facebook and Instagram to protect against fake celebrity endorsement scams, and 2) aid in identity verification for account recovery.

A pretty penny to pay given Marriott’s not sure it’s liable, but $52 million is the cost to satisfy the US Federal Trade Commission (FTC) and attorneys general of 49 states (and District of Columbia) for breaches that affected more than 300 million Marriott customers worldwide. The breaches were also investigated by the FBI who suspected hackers were working on behalf of the Chinese government.

If you think you already know that, you may be surprised reading the Center for Digital Democracy (CDD) report, which found unprecedented tracking techniques that enable streaming services to know and share information about your health, kids, race and political persuasion. One can even slip product images dynamically into TV episodes. Yikes!

Meet the Montana Consumer Data Privacy Act. Taking effect this month, it provides MT citizens protections, including requirements to limit processing of data, requiring disclosure when data is processed or sold, obtaining consent and incorporating an opt-out mechanism. What it does not provide, however, is a private right of action to sue. So, lacking some teeth.

Let’s be honest, what’s more enticing than getting kids hooked on your product? TikTok has it down to a science – right down to the number of times it takes a user to reach their “habit moment,” which is apparently 260 or more videos watched in the first week of having an account. This according to leaked information revealed in unredacted lawsuit documents that also show TikTok’s algorithm can protect against seeing too many unattractive people.