Narrow, but interesting for auto privacy buffs is a new law Utah is enacting – the Utah Motor Vehicle Data Protection Act. This states that car brand companies (franchisors) cannot force car dealerships (their franchisees) to provide access to consumer data held in the dealer data systems. The law does not incorporate protection of data the cars can generate, nor data that can be obtained via devices people connect to their cars.
A breach at health care company, Kaiser Permanente exposed the data of ~13.4 million past and present customers who are now being notified by the company of the event. The company clarified the information was shared with other organizations inadvertently, rather than having been hacked or sold, and the company is both investigating the data situation and looking at how to guard against future problems.
As AI legislation evolves, your company’s privacy policy should keep pace to assure customers of your commitment to safeguard their data. Beyond informing them of how it will be processed, you should clarify: 1) what will be automated via AI, 2) how their data will be used, 3) if the data will be used to train AI models, and of course, 4) how they can opt-out.
Google lashed out at the Department of Justice’s threat to break up the company, calling the proposals “radical.” Among other things, Google says the proposals would threaten users’ privacy, stifle innovation and break Android and Chrome. Given the appeals process, it will likely be years before we know whether Google will stay in one piece.