Dugie Standeford

1 month ago | privacy-daily.com | Dugie Standeford |Karl Herchenroeder |Adam Bender

The FTC firings mean that states must lead on privacy, according to Connecticut AG William Tong (D). “There’s nothing partisan about privacy enforcement,” he said in a statement emailed to us Wednesday. "Just look at every one of our data breach settlements stretching back for the past decade. All bipartisan, with every state and territory actively engaged to protect consumer privacy and the security of our personal information.

Jan 17, 2025 | privacy-daily.com | Dugie Standeford

The documents are part of Ofcom's implementation of the U.K. Online Safety Act (OSA). It was enacted in 2023, but many of its provisions became effective this month, according to an Ofcom compliance timeline. The law sets obligations on user-to-user (including social media) and online search platforms, such as requiring them to have systems and processes that reduce the risk of their services being used in ways that could harm users, CMS attorneys Anna Soilleux-Mills and Laura Bilinski posted.

Jan 11, 2025 | privacy-daily.com | Dugie Standeford

The act forbids: (1) Exploiting vulnerabilities of a natural person or specific group of people based on age, disability or specific social or economic situations in order to distort their behavior in a way that causes others to harm them. (2) Classifying people or groups over a certain time period based on their social behavior or inferred or predicted personal or personality characteristics. (3) Assessing people to predict their risk of committing a crime based solely on profiling.

Jan 10, 2025 | privacy-daily.com | Dugie Standeford

DPA Inactivity Widespread? |Top NewsData protection authorities (DPAs) may not limit the number of complaints a person files during a certain period under the EU General Data Protection Regulation (GDPR) unless they find that person is abusing the process, the European Court of Justice held Thursday (Case C-416/23). DPAs seeking to rid themselves of complaints is an EU-wide issue, though this case arose in Austria, said Austrian privacy campaigner Max Schrems.

Jan 10, 2025 | privacy-daily.com | Dugie Standeford

|EuropeTransport companies lack legitimate interest under the EU General Data Protection Regulation (GDPR) in requiring customers to indicate their title before purchasing train tickets, the European Court of Justice (ECJ) held in a preliminary ruling Thursday. The case arose from the complaint of a rail passenger (identified as Mousse) who was required by French company NCF Connect to tick a title before purchasing travel documents, allowing NCF to personalize communications with the customer.