This is a permanent edition. It carries the briefing exactly as published on this date and does not change.
US Healthcare Marketplaces Exposed Sensitive Citizenship and Race Data to Ad Tech Giants
Major US healthcare marketplaces have been found to be sharing highly sensitive personal data, including citizenship status and race, with advertising technology companies. This practice raises significant concerns about patient privacy and the potential for discriminatory targeting. The revelations highlight a systemic issue within the digital health sector regarding data handling practices and transparency with users about data sharing. This unauthorized disclosure occurred despite the sensitive nature of the information involved, which is typically protected under various privacy frameworks.
Desmond Fitzpatrick lodged an application with the UK First tier Tribunal General Regulatory Chamber under section 166 of the Data Protection Act 2018 regarding a complaint to the Information Commissioner. What did the Tribunal clarify about the scope of such applications?
Applications under section 166 of the Data Protection Act 2018 are procedural and do not challenge the substantive outcome of a complaint.
Applications under section 166 of the Data Protection Act 2018 allow the Tribunal to review the merits of the Commissioner's decision.
Applications under section 166 of the Data Protection Act 2018 permit the Tribunal to undertake an oversight role over the Commissioner's functions.
Applications under section 166 of the Data Protection Act 2018 enable the Tribunal to compel the Commissioner to re investigate a complaint.
Publicly accessible voter registration information is being exploited to facilitate privacy violations and harassment. The ability to easily access and aggregate personal details from voter rolls presents a significant risk for individuals' security and wellbeing. This weaponization of public data highlights gaps in data protection policies concerning readily available government records.
A study reveals that children can easily bypass online age verification systems, including those mandated by new regulations like the UK Online Safety Act, using rudimentary methods such as drawing on a fake mustache. This exposes the limitations of current age verification technologies and raises serious questions about the effectiveness of measures designed to protect minors online. The ease of circumvention undermines the intent of child protection laws.
The rise of "shadow AI" reflects unmanaged and unsanctioned AI tools being used within organizations, mirroring the past issue of shadow IT. This unmonitored deployment poses significant data privacy and security risks, necessitating the adoption of AI Bills of Materials (AI BOMs). AI BOMs are crucial for understanding and managing the components and data flows of AI systems to mitigate these emerging threats.
Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.