CDP Institute

What do Argentina, Canada, Israel, New Zealand and Switzerland have in common? The European Commission has determined that they, along with Andorra, the Faroe Islands, Guernsey, the Isle of Man, Jersey and Uruguay have met EU data safeguard requirements for cross-border transfers, according to the Commission’s newly released report.  The United States didn’t make the cut.

Good if you said yes above, since Consumer Reports found as many as 7,000 companies, including LiveRamp, Acxiom, Epsilon, Home Depot and Amazon, are monitoring activities of individual Facebook users.  This to help Meta understand what you do when you’re not on the their platform – and to enable them to target you with ads. Out of more than 700 participants who volunteered to have their data looked at, on average each had their data sent to Facebook by more than 2,200 companies.

Oregon’s data broker law has gone into effect, making it the fourth state after Vermont, California and Texas, to have special requirements for the data broker industry. This and the recently passed Texas law require data brokers to register with the state – and businesses that process data they’ve not collected directly from individual subjects should check the laws to see if they’re covered.

ISACA, a global association focused on security, governance, risk and privacy education surveyed more than 1,300 data privacy professionals on how their company was handling staffing and support for privacy. Key findings were that demand for technical roles is likely to increase, board prioritization of privacy is expected to hold steady, though more than half surveyed expected privacy budgets to decrease this year. Also consistent with last year is expert-level privacy professionals are the most difficult to hire.

Meta’s big. Kids are small, powerless, and okay to take advantage of, seems to be a foundational way of thinking at Meta from CEO Mark Zuckerberg at the top down through the ranks if new reports are to be believed. Redacted historical documents just unsealed in a New Mexico lawsuit showed that young users were being marketed to intentionally and inappropriately – and, much worse, that people at Meta knew there was a massive volume of sexually explicit content being shared between adults and young people, but repeated warnings and... Read More >

Called “Machine Learning System and Methods for Determining Confidence Levels of Personal Information Findings” the patent is fully incorporated across the BigID product line.

Know you’ve heard it before (here and in tons of places), but now that it’s 2024, we’re officially in the Year of the Sandbox. Whether you’re a Google Advertising and sandbox backer, or a Sandbox solution naysayer, Google reminds you it’s ‘imperative’ you work together with them now that we must all embrace our 3rd-party-cookieless future.

In a privacy-focused upgrade to its cloud computing area, Microsoft will keep all personal data, including pseudonymized data from automated system logs, from its systems Azure, Microsoft 365, Power Platform, and Dynamics 365 within the European Union. This will keep personal customer data protected under the GDPR law rather than having data transferred to the legislation-challenged US where there’s still no sign of national privacy laws.

New Jersey makes it 13. With passage of its consumer privacy bill, New Jersey will soon join other US states with privacy bills, pending the governor’s signature. The new bill has a number of unique provisions, including its scope, approach to biometric data, and the approach taken to include special restrictions on processing children’s data.

Being spied on and having private moments shared isn’t good for relationships – turns out this is true even when the wrongdoer is your car. Following on Mozilla’s recent study that revealed that car companies are dismal at protecting privacy (flagrantly ignoring it, in fact), Kapersky, a cybersecurity company surveyed 2,000 Americans and found 72% quite uncomfortable with automakers sharing their data with third parties. However, surprisingly less than half surveyed expressed concern that the cars have the ability to collect the data in the first place.

Tech industry advocacy group NetChoice won a legal stay of Ohio’s Parental Notification by Social Media Operators Act, a parental consent law that would have taken effect this week. The legislation required social media platforms to obtain consent from parents of children under age 16 for creating new accounts. NetChoice has been fighting this type of law across the US, despite research indicating social media use as a risk to children’s mental health. Is good mental health overrated?

The company (formerly X-Mode) will also delete previous, unlawfully collected data and models and algorithms that were derived from the data.