Top News: FTC’s action against Drizly, Medibank cyber-attack affects 3.9m users, and more
European Commission publishes guidelines for AI use in education
The European Commission published its “Ethical Guidelines on the Use of Artificial Intelligence” for educational institutions to “address how AI is used in schools, to support teachers and students in their teaching and learning, and to support administrative tasks in educational settings”. The guidelines are part of the Digital Education Action Plan for 2021-2027. Read More
US court upholds decision in wiretapping case
A US federal appellate court judge has upheld a previous ruling against NaviStone with allegations that the company’s tracking tools violated Pennsylvania’s wiretapping law. The ruling allows the plaintiff to proceed with the lawsuit against NaviStone and Harriet Carter Gifts over technology that allegedly enables online retailers to arrange to send postal mail to “anonymous” web users after their visit to a website. Read More
FTC takes action against Drizly over data breach
Online alcohol marketplace Drizly and its CEO will face action from the FTC over allegations of lax security controls that led to a data breach exposing the personal information of about 2.5 million consumers. While the company and its CEO were notified about the security problems two years before the breach, they failed to take adequate steps to protect the user data. Read More
Medibank cyber-attack affects 3.9m users
Australian health insurer Medibank was hit by a major cyber-attack about two weeks ago that affected 3.9 million customers. The hackers claimed to have extracted about 200GB of files and provided 1,000 records as proof. The company has not responded to questions about whether it has or will pay a ransom to the attackers. Read More
ICO releases draft employment practices guidance
The UK Information Commissioner’s Office has released its second employment guidance consultation aimed at providing practical guidance about handling the health information of workers in accordance with data protection legislation and to promote good practice. The consultations are part of a process to replace existing employment code as per the UK GDPR. Read More
