Last week we saw yet another delay to the adoption of the European Agency for Cybersecurity's European Cybersecurity Certification Scheme for Cloud Services. According to ENISA, the EUCS cloud certification scheme aims to ensure consistent standards and introduce specific security requirements to of...

The discussion draft of the American Privacy Rights Act includes two targeted artificial intelligence policy sections and a data minimization provision that could have big consequences for the industry down the road. IAPP Staff Writer Caitlin Andrews takes a closer look at the bill's requirements an...

The U.K. Upper Tribunal Administrative Appeals Chamber dismissed the U.K. Information Commissioner's Office appeal of a lower court's decision to overturn an order requiring Experian to change how it handles customer data. The court found some flaws in the First-Tier Tribunal's reasoning but no lega...

Politico reports EU policymakers will not immediately consider addressing alleged TikTok issues following passage of a U.S. law forcing China-based ByteDance to divest the social platform over national security and sensitive data protection concerns. Vice President of the European Parliament Dita Ch...

The Czech Republic's data protection authority, Úřad pro ochranu osobních údajů, fined Avast Software CZK351 million for allegedly giving users' personal data to marketers without properly anonymizing it. The UOOU also claimed Avast misinformed users about how their data would be used.Full story...