Many new cars collect large amounts of data about people, often without their knowledge, Denmark's Data Protection Agency said Monday.
Biometric Privacy
Biometric privacy laws regulate how companies handle sensitive personal identifiers like facial scans, fingerprints and voiceprints. In the U.S., Illinois’ BIPA has led to landmark litigation and multimillion-dollar settlements, setting a precedent for consent, data retention and security standards. Other states and countries are following suit with their own biometric requirements. This page covers key lawsuits, regulatory action and compliance best practices in the biometrics space.
A judge for the U.S. District for Northern Illinois on Monday scrapped a previous ruling in a case about a company collecting biometrics of its employees, claiming instead that the amendment to the Biometric Information Privacy Act does not apply retroactively, reopening case 24-01925.
A California data broker registration bill received support from Consumer Reports and Privacy Rights Clearinghouse. In a Tuesday letter to California Senate Judiciary Committee Chair Thomas Umberg (D), the consumer privacy advocates backed SB-361, which would amend the California Delete Act to require disclosure of more types of personal information.
The Montana House unanimously passed a neural data privacy bill on Wednesday. The House voted 99-0 to pass an amended SB-163 that adds neurotechnology data to the state’s Genetic Information Privacy Act.
Minnesota could add health information as a form of sensitive data and toughen limits for sensitive data more broadly under its comprehensive privacy law, a privacy attorney said Tuesday. Rep. Steve Elkins (D), author of the Minnesota Consumer Data Privacy Act, introduced HB-2700 Monday to amend the act before it takes effect in July. Sensitive data requires opt-in consent under the Minnesota law, unlike other personal data that carries an opt-out standard.
States must step in to protect healthcare privacy when the federal administration is likely to try and undermine the Health Insurance Portability and Accountability Act's (HIPAA) Privacy Rule, said privacy lawyers in a keynote fireside chat on the politics of healthcare privacy at the National HIPAA Summit Tuesday.
Connecticut Sen. James Maroney (D) took the middle ground in a private right of action (PRA) debate between Vermont Attorney General Charity Clark (D) and Mariner Strategies President Andrew Kingman at a Federal Communications Bar Association New England event Tuesday. The panelists agreed that a national comprehensive privacy law is unlikely soon.
The California Privacy Protection Agency (CPPA) board plans to meet April 4 at 8:30 a.m. PT to discuss and possibly act on proposed regulations on automated decision-making technology (ADMT), cybersecurity audits, insurance and other California Consumer Protection Act (CCPA) rule updates, the agency said Monday. The CPPA unveiled draft rules revisions -- and plans to discuss bigger possible changes -- in meeting materials released the same day.
Massachusetts lawmakers plan to hear testimony on a plethora of privacy bills during an April 9 hearing, as expected, the Joint Committee on Advanced Information Technology, the Internet and Cybersecurity announced Monday.
The new year has brought “escalating state regulatory demands and stricter enforcement reshaping business practices,” Proskauer privacy lawyers blogged Monday.