EDPB Publishes Draft Guidelines on the Interplay between Article 3 and Chapter V of the GDPR

The European Data Protection Board (EDPB) published draft guidelines on the interplay between Article 3, which sets out the territorial scope of the GDPR, and Chapter V, which regulates the transfer of data outside the EU. The draft guidelines clarify when the processing of data will be considered “transfer of personal data to a third country or to an international ...

EDPB Adopts Guidelines on Restrictions on Data Subjects Rights Under GDPR

The European Data Protection Board (EDPB) adopted Guidelines 10/2020 on restrictions under Article 23 of the EU General Data Protection Regulation. Article 23 permits the EU Member States to impose restrictions on data subject rights, as long as they maintain the essence of the fundamental rights and freedoms of individuals and are necessary and proportionate.

According to the guidelines, the ...

Drastic Changes to Facebook’s Facial Recognition and Ad Targeting Policies

Meta, Facebook’s mother company, announced two major changes to its policies, both intended to enhance users’ privacy.

The first change is the discontinuation of use of facial recognition technology on Facebook. Facial recognition enabled the operation of two main features: automatic tagging suggestions of people in photos and videos, and image descriptions for the blind and visually impaired (also known as ...

South Korea: Government Shared Facial Images of Travelers with AI Companies

According to government documents disclosed this month, the South Korean Ministry of Justice (MOJ) has shared with companies engaging in artificial intelligence approximately 170 million facial images of local and foreign travelers in the Incheon International Airport in Seoul, without obtaining their consent. The biometric data that the MOJ shared was intended to assist the AI companies in developing a ...

Dozens of Cyber Attacks on Israel; Major Hospital’s Systems Down Due to Attack

Dozens of cyber-attacks and attempted cyber-attacks against various Israeli institutions and companies were uncovered in October. In one of these events, the computer systems of a major Israeli hospital were completely crippled, and medical staff was forced to document procedures and medical records by handwritten notes.

Nine other hospitals in Israel were attacked as well, but the Israel National Cyber ...

New Head of the Israeli Privacy Protection Authority

The Israeli Government appointed Adv. Gilad Samama as the new head of the Privacy Protection Authority (PPA), ending a three-year period during which the role was vacant. Adv. Samma served in several professional and administrative positions in the Israeli Ministry of Justice. He was also a member of the “Tikva Hadasha” party, which is led by the current Minister of ...

China Continues to Tighten Data Privacy Regulation

The Cyberspace Administration of China (CAC) published for public comments, new draft guidelines for the cross-border transfer of data. The draft guidelines impose a comprehensive security review obligation on companies who: (1) process personal data of over a million data subjects; (2) process personal data collected or generated by the operators of “critical information infrastructure”; (3) transfer important data; or ...

The FTC Warns Businesses Against Posting Fake Reviews and Endorsements

The United States Federal Trade Commission has put on notice of potential offense over 700 companies and businesses, including tech giants like Amazon, Apple, Facebook, and Google. The FTC warned the companies that their use of fake reviews and misleading endorsements may lead to fines of up to 43,000 dollars.

The FTC may impose fines for the following deceptive practices, ...