Significant Fines on Both Sides of the Atlantic for Failures to Protect Personal Data

The Irish Data Protection Commissioner (DPC) decided to impose administrative fines totaling €405 million on Meta Platforms Ireland due to Instagram’s failure to implement privacy-by-default settings for child users of the social network. In addition, the DPC also imposed a reprimand and an order requiring Meta Platforms to bring its processing into compliance within three months.

The administrative fine was ...

EU Commission Proposes a New Cyber Resilience Act to Protect Against Inadequate Product Security

The European Commission has laid a proposal for a new Cyber Resilience Act to cyber-protect individuals and businesses that buy or use products or software with a digital component. This law is the first law in the European Union that addresses this subject matter, introducing mandatory cyber security requirements for products with digital elements.

The new law, formulated as an ...

Israel Commissioner of Biometric Applications Reports Risks in the Government's Image Databases

The Israel Commissioner of Biometric Applications in the National Cyber System has issued a report highlighting that any database that includes facial images constitutes a biometric database that requires special attention, even if the quality of the images is poor and it is not presently used for verification and identification processes. The Commissioner explains that this approach is due to ...

Israel Privacy Protection Authority Hardens its Policy on Breach Notification Timescales

The Israeli Privacy Protection Authority has rigidified its published policy on data breach notifications, emphasizing that it now requires that “immediate” notification be given upon the discovery, or reasonably suspected occurrence, of a serious information security incident.

According to the Protection of Privacy Regulations (Information Security) from 2017, a controller or processor with a database subject to a high or ...

New California Law Protecting Children's Online Privacy

Earlier this month, the governor of California signed into law a legislative bill passed with bipartisan support that requires online services to design their privacy practices in a way that by default protects the privacy of children under the age of 18. The new law, the California Age-Appropriate Design Code, will go into effect in July 2024. This law introduces ...

Albania Accuses Iran of Cyber-Attack and Cuts Diplomatic Ties with the Islamic Republic

Albania has severed its diplomatic ties with the Islamic Republic of Iran and ordered the Iranian embassy staff to leave the country, accusing the theocracy of perpetrating a cyber-attack against Albania.

Albania’s prime minister said that the cyber-attack attempted to cripple public services, destroy and steal government data and bring about turmoil. The prime minister indicated "irrefutable evidence" that Iran ...

Court Lifts Injunction Against LinkedIn, Allowing it to Block Scraping of Publicly Available Information

The U.S. federal district court for the Northern District of California has granted LinkedIn's motion to vacate the injunction that prohibited it from blocking hiQ Labs, a California startup, that has been running automated tools to collect publicly posted information of LinkedIn members.

The court was persuaded by LinkedIn's assertion of a significant change in circumstances because hiQ no longer ...