Social platform X (formerly Twitter) is facing several complaints in Europe for allegedly using EU users' personal data without consent to train its AI technologies, including Grok. The Irish Data Protection Commission has filed a lawsuit, and the non-profit organization NOYB has submitted complaints in nine countries, accusing X of violating GDPR regulations by collecting and using data without proper transparency or legal basis.
On August 2, Illinois amended the Biometric Information Privacy Act (BIPA), reducing the number of violations counted for repeated biometric data collection from the same individual and allowing electronic signatures as a method for obtaining consent. This amendment significantly lowers potential damages in BIPA lawsuits and offers businesses more flexibility in compliance.
The European Commission announced that TikTok has committed to permanently withdrawing its TikTok Lite rewards program from the EU market after concerns that the program violated the EU's Digital Services Act (DSA). The investigation highlighted TikTok's failure to conduct the required risk assessments before launching new features, marking the first case concluded by the European Commission under the DSA.
The U.S. Federal Trade Commission (FTC) has filed a lawsuit against TikTok and its parent company ByteDance, accusing them of violating the Children’s Online Privacy Protection Act (COPPA) and a 2019 settlement agreement. The lawsuit alleges that TikTok failed to delete underage users' personal data, improperly collected data from minors without parental consent, and created obstacles for parents attempting to delete their children's data.
Summary In February 2022, Texas Attorney General Ken Paxton sued Meta formerly known as Facebook , alleging that Meta unlawfully captured the biometric identifi
On July 30, the US passed two significant laws, the Kids Online Safety Act (KOSA) and Children and Teens' Online Privacy Protection Act (COPPA 2.0), marking a major shift in regulatory strategies for protecting children's online privacy.
South Korea's Personal Information Protection Commission fined Alibaba.com Singapore E-Commerce Private Limited approximately $1.43 million for violating the country's Personal Information Protection Act by improperly transferring user data across borders.
Recently, NOYB has filed numerous complaints against companies using questionable consent banners. This report categorizes and critiques eight types of cookie banner designs prevalent in non-compliant practices
Brazil's Federal Public Ministry and the Brazilian Institute of Consumer Protection filed a lawsuit against WhatsApp, seeking 1.7 billion reais in damages for collective mental anguish caused by alleged violations of privacy regulations.
The EU Artificial Intelligence Act introduces a comprehensive regulatory framework for AI systems, categorizing them based on risk levels and imposing specific transparency and compliance obligations for each category.
Texas Attorney General Ken Paxton has reminded companies to register as data brokers under the newly enacted S.B. 2105 by March 1, 2024, or face penalties. The law mandates registration, public notice, and the implementation of a comprehensive information security program for entities that collect, process, or transfer personal data of Texas residents.
Zellmer sued Facebook (now Meta) under the Illinois Biometric Information Privacy Act (BIPA) for privacy violations, similar to the "In re Facebook Biometric Information Privacy Litigation" case, which resulted in a $650 million settlement.
California sues Tilting Point for violating child privacy laws with its game SpongeBob: Krusty Cook-Off, resulting in a $500,000 settlement and required compliance measures.
In response to rising cybersecurity threats and stricter privacy regulations, Google and Microsoft are enhancing email security measures, requiring modern authentication methods like OAuth and two-factor authentication.
The Italian Antitrust Authority (AGCM) has fined Meta 3.5 million euros for data privacy violations on its social platforms, Facebook and Instagram. The AGCM found that Meta engaged in illegal collection of user data, violating consumer protection laws.
The Colorado AI Act aims to regulate consumer rights protection in interactions with AI systems, reduce algorithmic discrimination, and promote fairness and safety.
The Personal Information Protection Commission (PIPC) of South Korea has fined Kakao Corporation 15.14 billion KRW for violating the Personal Information Protection Act (PIPA).
Apple's iOS 17.5 update has caused deleted photos to reappear, raising privacy concerns. Users discovered this issue after upgrading, leading to speculation about potential privacy issues.
AT&T has been fined $57 million by the Federal Communications Commission (FCC) for illegally disclosing customer location data. The FCC found that AT&T leaked customer proprietary network information (CPNI) without consent, violating regulations.
The Federal Communications Commission (FCC) has proposed cybersecurity labeling rules for Internet of Things (IoT) products, introducing a voluntary labeling program called the "Cyber Trust Mark" to enhance consumer transparency and data protection.
The European Data Protection Board (EDPB) has issued guidelines on 'Consent or Pay' models operated by large online platforms for behavioral advertising.
The American Privacy Rights Act (APRA) of 2024, announced by US Representative Cathy Rogers and Senator Maria Cantwell, aims to establish comprehensive national data privacy and security standards in the US.
The U.S. Federal Communications Commission (FCC) has approved a voluntary cybersecurity labeling program for wireless consumer IoT products. The program provides consumers with an FCC IoT label, indicating compliance with minimum cybersecurity standards.
The Governor of Florida signed Bill HB 3, which regulates minors' use of social media and access to harmful content.
