The New York State legislature has passed updates to the state’s breach notification law, expanding the scope of “private information” protected under the law to include biometric information, email addresses, and their corresponding passwords or security questions and answers, and protected health information. It broadens the definition of a notifiable data breach to include unauthorized access to private information and ...

Italy’s privacy regulator imposes a million Euro fine on Facebook. Facebook’s pre-GDPR data protection breaches in the context of the Cambridge Analytica fiasco has now attracted a million Euro fine imposed by the Italian privacy regulator. The Italian regulator found that Facebook had disclosed to the third-party “This Is Your Digital Life” app, personal data of 214,077 Italian users. ...

The city of San Francisco has decided to prohibit the use of facial recognition technology by police and other local government authorities. The ban is part of an anti-surveillance ordinance that the city's Board of Supervisors approved, making it the largest American city to ban facial recognition technology.

The ordinance will come into force next month. It prohibits the use ...