Privacy Transformation - Issue 214

Curated privacy news, insights & resources, with a focus on Irish and EU developments.

PRIVACY

Digital rights group wants court to direct DPC to fully investigate claims against Meta

A European digital rights advocacy group wants the High Court to direct Ireland’s data protection watchdog to fully investigate its complaints about social media giant Meta’s handling of users’ data.

McEntee says gardaí will not ‘live profile anybody’ with facial recognition

Minister for Justice Helen McEntee has said there will be safeguards to make sure gardaí cannot use facial-recognition technology on a live basis. The Government has been divided on the topic of facial recognition for law enforcement purposes and the legislation for the technology has been separated from the Bill which would provide for Garda body-worn cameras.

🔗 RELATED:

• When will gardaí be able to use controversial facial recognition technology?
• Gardaí to get all-clear to buy body cams as Fine Gael rows back on facial recognition tech
• Press Release: An Garda Síochána to immediately begin process of purchasing bodycams

Privacy activist seeks to join Meta’s case against Irish Data Protection Commissioner

Privacy campaigner Max Schrems is seeking to be joined to Meta’s case against the Data Protection Commissioner over its record fine of €1.2 billion, the High Court has heard.

NGOs fear EU might strip complainants’ rights in cross-border privacy cases

Civil society groups from across Europe have mobilised to defend the rights of complainants to be full parties in cross-border cases of data privacy violations, amid fears that these might be removed under an upcoming EU legislative proposal.

Japan's digital ID card gets emergency review amid data leaks

Japanese prime minister Fumio Kishida has ordered an emergency review of the nation's ID Cards, amid revelations of glitches and data leaks that threaten the government's digital services push.

EDPB adopts template complaint form and a final version of Recommendations on the application for approval and on the elements and principles to be found in Controller BCRs

The EDPB has adopted a template complaint form to facilitate the submission of complaints by individuals and the subsequent handling of complaints by Data Protection Authorities (DPAs) in cross-border cases.

G7 data protection authorities point to key concerns on generative AI

The privacy watchdogs of the G7 countries are set to detail a common vision of the data protection challenges of generative AI models like ChatGPT, according to a draft statement seen by EURACTIV.

DATA BREACH

MOVEit hack: Gang claims not to have BBC, BA and Boots data

Cyber-criminals have told the BBC they do not have data belonging to large UK organisations thought to be victims of a mass hack. Firms including the BBC, British Airways and Boots have told staff that sensitive payroll data was stolen in last month's breach. But now the hackers Clop, speaking over email, claim "we don't have that data".

🔗 RELATED: Hacker gang Clop publishes victim names on dark web

Hackers threaten to leak 80GB of confidential data stolen from Reddit

Hackers are threatening to release confidential data stolen from Reddit unless the company pays a ransom demand – and reverses its controversial API price hikes.

ENFORCEMENT

Adtech giant Criteo hit with revised €40M fine by French data privacy body over GDPR breaches

French advertising technology giant Criteo has been issued with a revised fine of €40 million ($44 million) over failings to garner users’ consent around targeted advertising.

GUIDANCE & OPINIONS

ICO: Privacy Enhancing Technologies

This guidance discusses privacy-enhancing technologies (PETs) in detail. Read it if you have questions not answered in the Guide, or if you need a deeper understanding to help you apply PETs in practice.

🔗 RELATED: ICO urges organisations to harness the power of data safely by using privacy enhancing technologies

RESOURCES

NIST: Updated: Guidelines for Managing the Security of Mobile Devices in the Enterprise

This publication assists organizations in managing and securing mobile devices by describing available technologies and strategies. Security concerns inherent to the usage of mobile devices are explored alongside mitigations and countermeasures.

CONTRIBUTE
Have an interesting article, book, video, podcast or other resource that you would like to share with your fellow privacy practitioners? Please do drop me a note!