Google to Pay $85 Million to Settle an Arizona Consumer Privacy Lawsuit

Google has agreed to pay the state of Arizona approximately $85 million to settle a consumer privacy lawsuit alleging that Google secretly collected consumers' geolocation data on smartphones even after users disabled location tracking on their mobile devices. The Arizona Attorney General alleged that the tech giant used deceptive and unfair practices to track users' locations, even if they had ...

Israel Commissioner of Biometric Applications Reports Risks in the Government's Image Databases

The Israel Commissioner of Biometric Applications in the National Cyber System has issued a report highlighting that any database that includes facial images constitutes a biometric database that requires special attention, even if the quality of the images is poor and it is not presently used for verification and identification processes. The Commissioner explains that this approach is due to ...

Israeli Government Emancipates the Privacy Protection Authority

The Israeli government approved the governmental resolution proposed by the Minister of Justice to have the Privacy Protection Authority "be independent in the exercise of the powers granted to the head of the Authority to fulfill its duties" and "be budgeted separately within the budget of the Ministry of Justice." The government's decision states that the Authority will act independently ...

New California Law Protecting Children's Online Privacy

Earlier this month, the governor of California signed into law a legislative bill passed with bipartisan support that requires online services to design their privacy practices in a way that by default protects the privacy of children under the age of 18. The new law, the California Age-Appropriate Design Code, will go into effect in July 2024. This law introduces ...

Albania Accuses Iran of Cyber-Attack and Cuts Diplomatic Ties with the Islamic Republic

Albania has severed its diplomatic ties with the Islamic Republic of Iran and ordered the Iranian embassy staff to leave the country, accusing the theocracy of perpetrating a cyber-attack against Albania.

Albania’s prime minister said that the cyber-attack attempted to cripple public services, destroy and steal government data and bring about turmoil. The prime minister indicated "irrefutable evidence" that Iran ...

European Commission Publishes Directive on the Liability of AI Systems

The European Commission published its long-awaited proposal for a Directive on Artificial Intelligence (AI) Liability. The draft directive aims to supplement the EU's AI law, still being negotiated by the EU institutions. At the same time, the European Commission also published its proposal to update the EU Product Liability Directive from 1985. If approved, the combined proposals will change the ...

Significant Fines on Both Sides of the Atlantic for Failures to Protect Personal Data

The Irish Data Protection Commissioner (DPC) decided to impose administrative fines totaling €405 million on Meta Platforms Ireland due to Instagram’s failure to implement privacy-by-default settings for child users of the social network. In addition, the DPC also imposed a reprimand and an order requiring Meta Platforms to bring its processing into compliance within three months.

The administrative fine was ...

EU Commission Proposes a New Cyber Resilience Act to Protect Against Inadequate Product Security

The European Commission has laid a proposal for a new Cyber Resilience Act to cyber-protect individuals and businesses that buy or use products or software with a digital component. This law is the first law in the European Union that addresses this subject matter, introducing mandatory cyber security requirements for products with digital elements.

The new law, formulated as an ...