Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, published a statement to standardize the General Data Protection Law's interpretation of processing data of children and teens. It notes data processing can be conducted "based on the legal hypotheses provided for in t...

Fundação Getulio Vargas Law School professor Luca Belli wrote for Medianama, outlining ChatGPT's perceived noncompliance with Brazil's General Data Protection Law and why he filed a complaint to Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados. OpenAI CEO Sam Altma...

Australia's Northern Territory government unintentionally shared sensitive health data belonging to thousands of individuals with a third-party global vendor, ABC News reports. NT Health, the Northern Territory government's health department, consolidated four systems into one using the government-b...

Harvard Pilgrim Health Care's parent organization Point32Health said a cyberattack that began in March exposed patient and provider personal information, CBS News reports. Information accessed from 28 March to 3 April included personally identifiable information. Harvard Pilgrim said it is "taking s...

The case for imposing legal liability on providers of insecure software has been in the making by scholars and researchers for decades. It is recently back in the spotlight as one of the strategic objectives outlined in the recent National Cybersecurity Strategy released by the White House. It has b...