Top News – EU-US privacy framework challenged, Microsoft accused of illegal data scrapping and more

EU – US privacy framework challenged by French lawmaker

Phillippe Latombe, a French member of the European Parliament, submitted challenges against the EU – US privacy framework to the European Union General Court. The challenges were related to the DPF text’s legality. The other challenge was to immediately suspend the transatlantic deal that allows companies to transfer data across the EU and the US regions. The CNIL and the French Government were also informed of these challenges. Read more

New Zealand’s Privacy Act Amendment Bill introduced in the Parliament

The office of New Zealand’s Privacy Commissioner announced the introduction of the Privacy Act Amendment Bill in the Parliament. The proposed legislation calls to disclose the reasons for data collection by covered entities and the first & third parties accessing the collected data. A statement from the Privacy Commissioner read that the proposal is to keep up with the international best practices and to support broader transparency requirements. Read more

Microsoft and OpenAI face allegations of illegal data scraping

A class action lawsuit was filed against Microsoft and OpenAI in the federal court of San Francisco, accusing the companies of training their AI technology with the personal data of millions of users collected illegally. The complaint was on behalf of two software engineers and is a lot like the complaint by Clarkson Law Firm. The complaint accuses the companies of breaking several privacy laws while developing their generative AI-based models. Read more

China National Knowledge Infrastructure fined for CSL and PIPL Violations

The Cyberspace Administration of China fined CNKI RMB 50 million (approx. $6,825,491) following an investigation for violating the Cybersecurity Law (CSL) and the Personal Information Protection Law (PIPL). The investigation revealed several violations, including collecting personal information without consent and excessive collection of personal data beyond purpose. Read more

Meta’s appeal on Norway’s behavioral advertisement ban denied

The District Court of Oslo stood by the Norway data protection authority’s decision to issue an emergency ban on behavioral advertisements ban on Meta’s platforms. Following the ban on such behavior-based ads in July, the company sought a temporary injunction to prevent the authorities from enforcing the ban. Read more