CDP Institute

The tool has sections on different industries, including finance, health, law, education, insurance, retail, and others and it can be used to check for updates as rules change.

Texas sued General Motors for selling the data of 16 million drivers without consent. The data which included extensive information on driving behavior, was sold to insurance companies and often resulted in increased premiums.

The UK Information Commissioner’s Office (ICO) wants to fine IT service provider Advanced Computer Software Group £6.09 million (~US$7.8 million) for its failure to protect the personal data of 82,946 people in a National Service (NHS) cyberattack. The data included personal and medical information and for some, home access information on people receiving home care.

A four-year comparison of global data legislation shows many countries with laws previously pending have now passed laws; others that have newly pending legislation, and just a few countries with no draft protection plan. The Licks Attorney maps are based on information from the United Nations Conference on Trade and Development (UNCTAD).

A report from the NeuroRights Foundation looks at how neurotech companies are (mostly not) protecting privacy – and what products in multiple industries intend to get access to. The cross-industry report looked at 30 companies, their privacy policies and user agreements for devices that access and can record data from the nervous system, including the brain, spinal cord and peripheral nerves.

How much harm will it take before a reset on whether protecting kids matters? With this US federal court ruling, key provisions of California’s child online safety law have been blocked by NetChoice, the tech trade group standing firm against regulating the tech industry. And, really, why would we want restrain tech, or protect kids from an industry constantly in the news for profiting from them without consent?

The EU request was made via the Digital Services Act (DSA).

This is the highest fine given by that agency to date.

Its goal is to ensure compliance with new state privacy laws and aid the ad industry in managing consent and privacy across disciplines.

Now, the law is being tested in litigation to see if it can be applicable to charge retailers, including Patagonia Inc. and Macy’s Inc., when transactions are made online.

The data of 2.9 billion people is at risk from one of the largest-ever breaches. This is due to a hack of data records provider, National Public Data, a company that specializes in background checks and fraud prevention. The hacker group offered the international data on the dark web for ~$3.5 million, and the compromised data includes names, addresses and social security numbers.

Activist group noyb has filed complaints in Austria, Belgium, France, Greece, Ireland, Italy, the Netherlands, Spain, and Poland looking to force Elon Musk’s X to suspend or restrict processing the personal data of EU user posts to AI-train Grok. The complaints were filed because the group felt Ireland’s Data Protection Committee (DPC) wasn’t getting to the core of the problem to ensure X will be fully investigated for GDPR compliance.