CDP Institute

The Minnesota Consumer Data Privacy Act has just been enacted and will strengthen citizen rights with strong controls and provisions. This includes that any data that reveals individual details is classified as personal data, and that Minnesotans have rights to know about data held, request deletion and can opt out of data profiling and selling.

No more faking being of age if Google has its way. Soon it expects to be able to edit you out of the age-identification process and instead rely on its AI models to determine whether you’re of age to use their products and services. If you think they’re wrong in age estimation, you’ll be able to try to prove differently. There are concerns about this being overzealous data profiling – with questions about what data will be used, will the company gain consent first, and how long will data be... Read More >

Experts suggest proceeding with caution with models like this, and with other AI tools that are designed in ways that can introduce vulnerabilities into business systems – particularly if they’re from China.

Amazon confirmed they’ve made a sweet deal to buy AI wearable company, Bee, a start-up that uses a Fitbit-like bracelet and an Apple Watch app to record e-v-e-r-y-t-h-i-n-g it hears. No need to make appointments, reminders or to-do lists for yourself because Bee’s got you covered at an affordable $50, which is much less than competing offerings from its early AI competitors. Are there privacy risks? Sure, quite a few, but you can manually opt out if you remember to, at least for now. Once Amazon owns Bee, who knows?

Flo Health, makers of the Flo App used for tracking menstrual cycles and fertility, and thus privy to highly sensitive data, has been facing a user class action since 2021 for sharing data with third parties. The company has since settled with Google and had AppsFlyer claims dismissed, but litigation is ongoing with Meta, which is accused of violating the California Confidentiality of Medical Information Act.

Agreement has been reached on the GDPR Enforcement Regulation, the biggest change to be made since the law was enacted in 2018. Among the changes, it will give businesses the right to be heard by EU regulators and will expedite and more efficiently enable processing of cross-border enforcement cases.

Seventy-two percent of teens have engaged with AI chatbots designed to have personal conversations, and fifty-two percent say they are regular users, according to a Common Sense Media study of more than a thousand teens ages 13-17. While 80% said they still prioritize human friendships (yay, team!), 33% chose AI over humans for serious conversations and 24% have shared personal information.

It specifies HR data handling must be compliant with GDPR and emphasizes the law cannot be overridden.

The US 5th Circuit Court of Appeals ruled Mississippi’s law requiring age verification for social media sites can go into effect. This overrules a federal district court which supported NetChoice’s bid to block it.

Despite the state’s motto, “the people rule,” an Arkansas judge is mulling whether to allow enforcement of a statute that prohibits use of social media algorithms that might addict or otherwise harm users. NetChoice, which challenged the law, claims it is too vague and is unconstitutional.

Mexico decreed collection of citizen biometric ID data will be mandatory starting next year. Its population registry, CURP, will incorporate fingerprint and iris data into a single platform and data will also be shared with other government databases. Then, soon after for enhanced family privacy depletion, Mexico intends to collect biometrics on kids & teens.