The HIPAA Journal reports cycle management firm MedData agreed to pay USD7 million to settle a class-action lawsuit related to a data breach. The lawsuit involved an incident where the data of 136,000 people was exposed after an employee allegedly uploaded the information to a public-facing website....

The U.K. Information Commissioner's Office found Google's proposed third-party cookie replacement, the Privacy Sandbox, needs to better protect users' personal data, according to ICO draft documents obtained by The Wall Street Journal. A review of the the ICO report found, as presently constituted, ...

The European Commission published an overview of the Data Act. The law raises rules on who can access and use data generated in the EU across all economic sectors while establishing the conditions upon which public sector entities can obtain request data from businesses "where there is an exceptiona...

The European Data Protection Board's opinion on the pay-or-consent models being deployed by large online platforms as a legal construct to support behavioral advertising, is generating unprecedented aggravation and heated opinions, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes. Det...

South Korea's Personal Information Protection Committee updated guidelines for conducting data protection impact assessments under the Personal Information Protection Act. The revised notice includes new sections on automated decision-making technology, pseudonymous information processing and change...