IT Security & Privacy

California's Attorney General (AG) made a significant announcement on July 14, revealing an investigative sweep targeting large California employers to assess their compliance with data privacy and consumer protection requirements concerning their employees and job applicants. The move comes just two weeks after a court put a hold on the enforcement of updated California Consumer Privacy Act (CCPA) regulations, potentially catching some businesses off guard.

Google's AI language model, Bard, is finally available in the European Union after a temporary delay due to privacy concerns raised by the General Data Protection Regulation (GDPR). The Irish Data Protection Commission (DPC) has given its approval, stating that Google has provided sufficient information to address EU privacy worries.

Microsoft recently disclosed a data security breach last week in which a group of Chinese hackers targeted customers' email systems to gather intelligence. The breach highlights the need for robust data security measures and proactive defense strategies.

Oregon has become the latest state to pass comprehensive privacy legislation with the approval of Senate Bill 619 by both Houses of the Oregon State Legislature. The Act, which follows the template of other state privacy laws, aims to enhance data protection and privacy rights within the state.

The Biden administration has unveiled the long-awaited implementation plan for its National Cybersecurity Strategy, outlining a comprehensive roadmap to strengthen cybersecurity efforts across federal agencies and foster public-private partnerships. The living document, which will undergo continuous updates, sets forth 65 high-impact initiatives that federal agencies must fulfill within specified timelines.

Texas has recently joined a growing number of states by enacting a comprehensive consumer data privacy law known as the Texas Data Privacy and Security Act. The Act, which will come into effect on July 1, 2024, places obligations on businesses operating in Texas and processing personal data of Texas residents. With similarities to laws in other states like Virginia, California, and Colorado, this legislation aims to enhance consumer privacy rights and data protection.

The Norwegian Data Protection Authority (DPA) has announced its intention to impose a temporary ban on Meta, the parent company of Facebook and Instagram, from conducting behavioral advertising using the personal information of users in Norway. The ban, set to take effect on August 4, will last for an initial period of three months unless Meta can demonstrate compliance with the relevant requirements of the General Data Protection Regulation (GDPR). The DPA has warned of potential fines of up to 1 million Norwegian kroner (U.S. $100,000) per day if Meta fails to comply with the decision.