In June of this year, Brazil’s National Data Protection Authority opened an administrative enforcement proceeding against Claro, one of the country’s largest telecom carriers, over the sharing of customer data with Serasa, the largest credit bureau in Latin America.
Data Privacy
GDPR 10 years on: Differences in regulatory enforcement still problematic
In the decade since the EU’s groundbreaking privacy legislation, the GDPR was approved, companies have faced increased scrutiny over the reasons they collect, retain, and share personal information, as well as the measures they take to ensure its security.
Companies risk violating data, consumer laws over agentic AI use
Companies are at increased risk of violating Europe’s tough privacy laws because boards have little awareness of the different types of AI or their inherent risks. While many organizations are more familiar with predictive and conversational AI tools, such as chatbots that carry little or no discernible risk, they have not grasped that generative AI—and especially agentic AI—are different animals.
Amazon fined $2.25M for failing to respond to identity theft victim requests
Amazon has agreed to pay $2.25 million for failing to provide records to customers who were victims of identity theft, as required by the Fair Credit Reporting Act (FCRA), the Federal Trade Commission (FTC) said. The fine, described in a proposed order, is the largest ever levied for an FCRA violation, the FTC said in a […]
GDPR 10 years on: Data compliance now front of mind
Europe’s landmark privacy legislation, GDPR, was officially adopted ten years ago and has been in force since May 2018. It has forced organizations to change the way they think about personal information and has put privacy risk firmly on the board’s agenda, especially since the sanctions available under the regime are potentially ruinous
Littler Survey: AI and data privacy issues top of mind for employers
AI ranked as the top issue that’s expected to impact workplace policy changes over the next 12 months, even more so than DEI)and immigration enforcement matters, according to findings from law firm Littler’s 14th Annual Employer Survey.
ICO lists five steps to help companies protect themselves from AI cyber threats
Companies have long prioritized cybersecurity as a key risk to their operations, but AI’s ability to increase the number, speed, severity, and types of attacks has prompted the U.K.’s regulator to set out five practical steps that organizations can take to strengthen their resilience against AI-powered threats and cyberattacks.
China’s data scrutiny puts financial firms’ day-to-day compliance to the test
China is tightening personal information protections and urging businesses that handle personal data to strengthen compliance. Violations could result in million-dollar fines, depending on the case.
Remember the GDPR scramble? The EU Anti-Corruption Directive clock is already running.
This isn’t just a European story. GDPR caught global businesses off guard. This is for everyone. The directive is already in force. And like GDPR before it, the organisations caught off guard won’t be the ones who didn’t know about it. They’ll be the ones who assumed it didn’t apply to them.
In largest CCPA fine ever, GM pays $12.75M to settle California privacy allegations
General Motors (GM) has agreed to pay $12.75 million to settle allegations that it violated California’s Consumer Privacy Act (CCPA) by selling drivers’ location and other data, California Attorney General Rob Bonta announced. GM allegedly collected the data through consumers’ use of OnStar, a program installed in GM cars, which can provide directions or summon […]
