Hello Friends,
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) informed Google that the consent banners on the Google search engine pages and on YouTube currently do not comply with data protection requirements.
This news and more, in this fortnights Data Privacy Insights- curated privacy news from across the globe.
Enjoy reading!
Data Breach
USA: Mortgage Servicer Reveals Data Breach Affecting 2.5 Million Users
Lakeview Loan Servicing disclosed a massive data breach that went undetected for over a month last fall and compromised the personal information of over 2 million customers. The company, which claims it is USA’s fourth-largest servicer, said in public notices the breach impacted 2,537,261 borrowers between Oct. 27, 2021, and Dec. 7, 2021, and was identified in early December.
Google Bans Dozens of Apps with Data-Harvesting Software
Google banned dozens of applications from its Google Play Store in which it identified hidden data-harvesting software. Measurement Systems, which wrote the code that ran on millions of Android devices, is tied to U.S. national security contractors, according to documents.
ENFORCEMENT
EU: Dutch DPA Issues Its Highest Fine to Tax Authorities
The Dutch data protection authority, Autoriteit Persoonsgegevens, fined tax authorities 3.7 million euros for violating the EU General Data Protection Regulation. The fine was based on six violations including no legal basis for the processing of personal data, the goal of the Fraud Signalling Facility was not defined in advance, contained incorrect information, and information was kept for too long.
EU: Google, YouTube Consent Banners Violate Hamburg Data Protection Requirements
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) informed Google last week that the consent banners on the Google search engine pages and on YouTube currently do not comply with data protection requirements. A large number of those affected had complained to the HmbBfDI about these consent banners. After clicking on the "I agree" button, it is possible to consent to all processing of personal data on Google's offers. However, those who do not wish to give such consent only have the option of refusing the settings for each data processing individually via the "Customize" page.
Privacy Regulations
MEPs Finalized Draft Artificial Intelligence Proposal
In April 2021, the European Commission revealed its proposal to regulate artificial intelligence. On April 11, European Parliament co-rapporteurs finalized the Artificial Intelligence draft report. The draft is slated for parliamentary discussion on May 11 with the final vote on Nov. 9.
Utah's Government Privacy Officer Wants to Train and Certify 50 Specialists
Utah’s Government Operations Privacy Officer Christopher Bramwell wants to find and train at least 50 professionals in data security and privacy. Bramwell said with funding from the American Rescue Plan, Utah will support identifying potential professionals, developing training, and getting individuals certified.
Privacy Resources
Swedish DPA Reports an Increase in Health Care Cybersecurity Attacks
In a report of personal data incidents received in 2021, Sweden’s data protection authority, Integritetsskyddsmyndigheten, noted a 26% increase in cybersecurity attacks on the health care sector. A total of 5,767 personal data incidents were reported in 2021.
CNIL Offers Guidance on Artificial Intelligence
France’s data protection authority, the Commission nationale de l'informatique et des libertés, published guidance on artificial intelligence. The guidance discusses the importance of recognizing the presence of AI technology, the reasoning behind errors made by AI, and the support the CNIL offers.