CDP Institute

Tinder, the dating app owned by Match Group, has been sued under Illinois Biometric Information Privacy Act (BIPA) alleging it violated the law by compiling and storing faceprints without notifying app users. Google is facing a similar class action in Louisiana that claims it violated a state statute that’s similar to BIPA by collecting and selling biometric data of state residents. There is also a proposed class action in Illinois against Subaru that alleges car models with its DriverFocus facial recognition function violate BIPA because the tool collects and stores... Read More >

A TikTok class-action complaint in California accuses the social app of collecting mass data from iPhone users by capturing keystrokes when users visit outside websites via TikTok’s browser. Concern is that keyboard inputs, including for passwords and credit card information are accessible to TikTok. The company has lately been raising concerns of EU and US regulators for its data practices.

Saudi Arabia’s data authority has published draft amendments to its Personal Data Protection Law (PDPL) for comments this month in preparation for changes to go into effect this spring. This includes major changes to make laws more business friendly. The Saudi Data and AI Authority (SDAIA) changes include allowing data transfers to jurisdictions that ensure appropriate privacy protection; allowing legitimate interest as a basis for processing non-sensitive data, including for location data; and a right to individual data portability.

A survey by CommX, CommerceNext, Bizrate and Coresight Research of more than 1,000 shoppers revealed, a vast majority were concerned – 70% strongly agree, 87% strongly or somewhat agree – about data use.  Those in wealthy households ($150,000+ income) were most concerned about how their data was stored.

Finland’s Office of the Data Protection Commissioner is overseeing the GDPR4CHILDRN project, which has a 2-year plan to develop a toolkit to be used by children’s activity associations and by parents and young people to help educate about data protection for youth. Plans are for the toolkit to be published in Finnish, Swedish, and English, and translated into Russian, Estonian, Somali, and Arabic.

If 90+ US human & internet rights groups are to be believed, the end-year push to get the Kids Online Safety Act (KOSA) passed by the Senate during the current lame-duck Congress may do more harm than good. The groups sent a joint letter to lawmakers saying they believe the law’s weakly defined protections for ages 16 and under could provide opportunities for censoring information about LGBTQ+ and reproductive rights and also give parents tools to spy on their kids.

It also allows users to limit use of personal information and it ensures Snapchat’s compliance under the California Consumer Privacy Act (CCPA).

A key aspect is to help businesses sort out nuances of the multiple privacy regulations, including the five new state ones.