EDPB Publishes Final Guidance on Facial Recognition Technology in Law Enforcement

The European Data Protection Board (EDPB) has published the final guidelines on the use of facial recognition technology in the field of law enforcement. The guidelines emphasize that the use of biometric identification for enforcement purposes requires that national legislation provide an adequate legal basis for processing biometric data. The legislature must authorize the relevant authority to process sensitive personal ...

Israel Formally Publishes the New Privacy Regulations Regarding Personal Data from the EEA

The Israeli government formally published the new privacy regulations that apply primarily, but not exclusively, to personal data that originates from the European Economic Area (EEA). The new regulations were adopted to support the efforts of the EU Commission to renew its recognition of Israel as an adequate country whose level of protection of personal data is equivalent to that ...

Apple Instructs Its Employees Not to Use ChatGPT Due to Data Processing Concerns

Apple has reportedly joined other major companies in restricting the use of AI tools, especially generative AI tools, due to concerns regarding data security.

The ban includes services such as ChatGPT and others such as GitHub Copilot which programmers use. The decision was influenced by concerns related to how these AI platforms handle data and the fact that Apple’s competitor, ...

New York City Adopts Final Rules on Automated Employment Decision Tools

The New York City Department of Consumer and Worker Protection has adopted rules to implement the New York City law from 2021 regarding automated employment decision tools (“AEDT”). This first-of-its-kind municipal law prohibits private and public-sector employers and employment agencies in New York City from using an automated employment decision tool unless the tool has been subject to a bias ...

California Formally Adopts New Privacy Rules; Three New States in the U.S. Nearly Finalize Privacy Laws

Following a rulemaking process that began in mid-2022, the California Office of Administrative Law has formally approved the California Privacy Protection Agency’s regulations implementing portions of the California Privacy Rights Act of 2020 (CPRA). The new rules are effective immediately, but enforcement of various elements of the new rules will not begin until July 1, 2023.

The new regulations include ...

U.S. Supreme Court Says Google and Twitter Are Not Liable for Content that Incites Terrorism

The Supreme Court of the United States held that Twitter, Facebook, and Google’s YouTube are not responsible for allowing ISIS to use their platforms to promote terrorist agendas. The decision was delivered on a lawsuit filed by the family of a Jordanian citizen who was murdered in an ISIS attack at the Reina nightclub in Istanbul.

The lawsuit alleged claims ...

CJEU Says GDPR Damages Are Recoverable Even If Damage Is Minimal

The Court of Justice of the European Union (CJEU) ruled that the mere infringement of the provisions of GDPR is insufficient to give rise to compensation unless the data subject can prove that they suffered damage (monetary or non-monetary loss), even if minimally, because of the infringement.

The judgment was delivered on a lawsuit filed by an Austrian citizen against ...

EU Announces the First Batch of Companies Regulated under the Digital Service Act

The European Commission has adopted the first designation decisions under the Digital Services Act (DSA), which aims to enhance consumer rights and protections in the digital world and increase legal certainty, fairness, and harmonization of the rules that apply to digital service providers. The EU Commission designated 17 Very Large Online Platforms (VLOPs), including YouTube, Amazon store, Alibaba/AliExpress, Google Play, ...