Privacy Transformation - Issue 243

Curated privacy, security & tech news, insights & resources with a focus on Irish and EU developments.


PRIVACY

You think last year was big for data protection? Brace yourself for 2024

Privacy legislation is set to mushroom with huge implications for Ireland.

Helen Dixon speaks of ‘Clunky’ EU Law Thwarting Big Tech Probes

The data watchdog panned for dragging her feet on probes into Tech Giants such as Meta Platforms Inc. blamed “clunky” European Union procedures for wasting energy, time and money in the race to defend citizens’ privacy.

Britain’s got some of Europe’s toughest surveillance laws. Now it wants more

The U.K. already has some of the most far-reaching surveillance laws in the democratic world. Now it’s rushing to beef them up even further — and tech firms are spooked. Britain's government wants to build on its landmark Investigatory Powers Act, a controversial piece of legislation dubbed the "snooper's charter" by critics when introduced back in 2016.

💡Insights: What to Expect in U.S. Privacy for 2024

In 2023, the privacy landscape saw a proliferation of comprehensive state data privacy laws being enacted in several jurisdictions, as well as a few that have also taken effect. Although, many of the laws are similar, businesses must continue to assess them individually – accounting for the nuances in their compliance obligations and the rights afforded to consumers. On the federal level, there has not been significant movement on an omnibus privacy law despite the American Data Privacy and Protection Act, introduced in 2022.

EU prepares to push back on private sector carve-out from international AI treaty

The European Commission is preparing to push back on a US-led attempt to exempt the private sector from the world’s first international treaty on Artificial Intelligence while pushing for as much alignment as possible with the EU’s AI Act.


DATA BREACH

Law firm that handles data breaches was hit by data breach

An international law firm that works with companies affected by security incidents has experienced its own cyberattack that exposed the sensitive health information of hundreds of thousands of data breach victims.


ENFORCEMENT

Digital rights group files additional complaint against Meta’s ‘pay or okay’ model

The non-profit digital rights organisation Noyb has filed an additional complaint with the Austrian data protection authority about Facebook’s “pay or okay” system, this time focusing on the withdrawal conditions.

Belgian SA: a baptized person has the right to be deleted from the baptismal register

A baptized person applied to the diocese of Ghent to be deleted from all Church files, including the baptismal register. However, the Roman Catholic Church does not delete the data from the baptismal registers, but rather adds an annotation reflecting the person's wish to leave the Church in the margin of the register.


GUIDANCE & OPINIONS

EDPS: Opinion on the signing and conclusion on behalf of the European Union, of the Protocol amending the Agreement between the European Union and Japan for an Economic Partnership regarding free flow of data

EDPS Opinion 3/2024 on the signing and conclusion on behalf of the European Union, of the Protocol amending the Agreement between the European Union and Japan for an Economic Partnership regarding free flow of data.


CONTRIBUTE
Have an interesting article, book, video, podcast or other resource that you would like to share with your fellow privacy practitioners? Please do drop me a note!