CDP Institute

Dell Technologies has announced a data breach and has sent messages to alert customers. The company said payment information was not accessed, though customer names, addresses, and order details were. This follows receipt of a threat actor claim last month on the dark web saying access to 49 million records of Dell customers and employees was accessed.

A new framework which is based on the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules will be redesigned to allow non-APEC country participation. Countries currently participating are Japan, the US, South Korea, Canada, Mexico, the Philippines, Singapore and Taiwan. The UK will be the first to join, and Dubai and Bermuda are expected soon to follow.

Maryland and Vermont passed new privacy laws, or in Vermont’s case, nearly so. Maryland’s is signed, sealed, and will go into effect in October, Vermont’s is on the governor’s desk. Both give customers rights to know, access, delete, and opt-out — but Vermont’s is set to pack a BIG punch (unprecedented in other states) because it allows individuals to sue companies that violate their privacy rights.

The IAB, American Civil Liberties Union and a dozen other organizations have fought against passage of amendments to the Children’s Online Privacy Protection Act (COPPA 2.0), the Kids Online Safety Act (KOSA) and the Kids Off Social Media Act (KOSMA). There was some hope this month in Congress that these bills might pass as part of a bundle of amendments added to the Federal Aviation Administration (FAA) Reauthorization Act, but they along with most other amendments in the bundle were pulled out.

Concerns include that the company’s use of hand scanners, monitoring software, GPS and other tracking technologies are negatively impacting workers’ mental and physical health.