Notes from the Asia-Pacific region, 3 May 2024

(May 2, 2024) Hello from India. I headed back to India after attending the IAPP Global Privacy Summit 2024 in Washington, D.C., and I'm enjoying the lovely spring ... Read More

New Zealand DIA proposes to cut government privacy positions  

(May 2, 2024) The New Zealand Department of Internal Affairs proposed the government should cut privacy and information security positions to reduce government spending, R... Read More

Poland's DPA raises concerns over proposed bill's privacy impacts

(May 2, 2024) Poland's data protection authority, Urząd Ochrony Danych Osobowych, said it has "serious reservations" about the proposed bill on the National Register of Pe... Read More

CISA plans voluntary cybersecurity pledge

(May 2, 2024) The U.S. Cybersecurity and Infrastructure Security Agency plans to roll out a voluntary pledge committing U.S.-based technology companies to strengthening cy... Read More

UnitedHealth Group CEO confirms $22M ransomware payment

(May 2, 2024) Health insurance company UnitedHealth Group confirmed to the U.S. Senate Committee on Finance that it paid hackers USD22 million in Read More

US senators ask FTC to investigate automakers over location privacy concerns

(May 1, 2024) U.S. Sens. Ron Wyden, D-Ore., and Ed Markey, D-Mass., sent a letter to the Federal Trade Commission asking for an investigation into automakers for allegedly... Read More

CNIL introduces BCR self-assessment tool

(Apr 30, 2024) France's data protection authority, the Commission nationale de l'informatique et des libertés, introduced a self-assessment tool for binding corporate rules... Read More

Finland court sentences hacker to 6 years in prison

(Apr 30, 2024) Finland's District Court of Western Uusimaa sentenced hacker Aleksanteri Kivimäki to six years in prison for a cyberattack that stole the data of 33,000 Vast... Read More

FTC updates Health Breach Notification Rule

(Apr 29, 2024) The U.S. Federal Trade Commission updated the Health Breach Notification Rule. The revised rule includes updated definitions to "underscore application" to h... Read More

Brazil's ANPD authorizes Security Incident Communication Regulation

(Apr 29, 2024) Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, announced the authorization of the Security Incident Communication Regulati... Read More