The Court of Justice of the EU (CJEU) just ruled GDPR grants regulators power to require any data controllers caught unlawfully processing data to erase such data. This is in addition to the data controllers having to respond to data subjects’ requests to have their data released.
Airbnb has announced that hosts will no longer be permitted to install indoor security cameras in their properties. Those hosts who have them already installed will have to remove them by April 30, or risk having their listing or account removed from the Airbnb platform.
The EU Parliament passed The Cyber Resilience Act (CRA), which is intended to codify cybersecurity law for products with digital elements (PDEs), including smart home devices, connected toys, wearables and software products such as antivirus applications. Expected to be approved by the EU Council in April, it will then move to being adopted as a law. The EU views this as protecting against an important area of vulnerability and will require manufacturers to ensure products have protections for privacy built in.
The second half of 2024 saw the CDP industry continue its shift towards embedding CDPs in customer-facing systems, according to the CDP Institute’s latest Industry Update report. Nearly all firms new to the report had added a CDP to an existing product, and major acquisitions including ActionIQ, Lytics, and mParticle were all made by customer management vendors. The new report adds coverage of composable CDP vendors, which is still a much smaller sector than conventional CDP systems.