The HIPAA Journal reports cycle management firm MedData agreed to pay USD7 million to settle a class-action lawsuit related to a data breach. The lawsuit involved an incident where the data of 136,000 people was exposed after an employee allegedly uploaded the information to a public-facing website....

The European Commission published an overview of the Data Act. The law raises rules on who can access and use data generated in the EU across all economic sectors while establishing the conditions upon which public sector entities can obtain request data from businesses "where there is an exceptiona...

The European Data Protection Board's opinion on the pay-or-consent models being deployed by large online platforms as a legal construct to support behavioral advertising, is generating unprecedented aggravation and heated opinions, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes. Det...

South Korea's Personal Information Protection Committee updated guidelines for conducting data protection impact assessments under the Personal Information Protection Act. The revised notice includes new sections on automated decision-making technology, pseudonymous information processing and change...

Electronic Frontier Federation Staff Attorney Mario Trujillo urged U.S. Congress to allow for a private right of action, limit data sharing with the government and not preempt states from having stronger privacy laws under the proposed American Privacy Rights Act. He said the bill's focus on online ...