New Zealand has passed the Privacy Amendment Act, introducing new obligations designed to give citizens greater clarity over how their personal information is collected and used. Privacy Commissioner Michael Webster said the reform will align the country’s framework more closely with international standards while helping New Zealanders better exercise their privacy rights.
The BBC first reported that a ransomware attack against Collins Aerospace’s airport software has forced check-in and boarding systems offline across several of Europe’s busiest airports, leaving airlines to rely on manual workarounds.
Kmart’s experiment with high-tech fraud prevention has backfired. Australia’s Privacy Commissioner has ruled that the retailer unlawfully harvested shoppers’ biometric data in its attempt to stop refund fraud, a decision that places facial recognition technology under fresh scrutiny in the retail sector.
Millions of customers of luxury fashion houses Gucci, Balenciaga, and Alexander McQueen may have had their personal details compromised after a cyberattack targeting their parent company, Kering, according to a report from the BBC.
The European Data Protection Board (EDPB) has adopted its first set of guidelines clarifying how the EU’s General Data Protection Regulation (GDPR) aligns with obligations under the Digital Services Act (DSA). The move marks a significant step in creating a coherent digital rulebook across the European Union.
Privacy regulators in California, Colorado, and Connecticut are tightening the screws on companies that still aren’t getting the message. The California Privacy Protection Agency (CPPA) joined with the Attorney Generals of California, Conneticut, and Colorado states in announcing a joint sweep of businesses suspected of ignoring Global Privacy Control (GPC) signals, the simple browser setting that tells companies to stop selling or sharing a consumer’s personal information.
South Korea’s Personal Information Protection Commission (PIPC) has imposed one of the country’s largest-ever privacy penalties on SK Telecom (SKT), ordering the mobile carrier to pay $99.9 million (KRW 134.8 billion) after a series of failures that exposed the personal information of more than 23 million subscribers.