In a lawsuit brought by WhatsApp (owned by Meta) against NSO Group Technologies, the court granted partial summary judgment in favor of WhatsApp, finding NSO liable for violations of the federal Computer Fraud and Abuse Act (CFAA), the California Comprehensive Computer Data Access and Fraud Act (CDAFA), and breach of contract.
NSO was accused of sending malware through WhatsApp’s system ...
The Israeli Competition Authority recently signaled, in a conference celebrating its 30th anniversary, that the regulatory Merger Directive may soon be updated to weigh the factor of data ownership concentration mergers approval application, even when the merging companies are not in direct competition.
Data ownership concentration was a pivotal concern for the regulator in its decision to deny the merger ...
The Israeli Privacy Protection Authority (PPA) recently issued a new directive detailing the requirements for transferring ownership of databases of personal data. Directive No. 2/2024 emphasizes the transferor’s obligation to notify data subjects when ownership changes.
According to the directive, any change in ownership warrants notification to data subjects regarding the new owner’s identity and contact information, giving them the ...
The Irish Data Protection Commission (DPC) hit Meta Platforms Ireland Limited (MPIL) with a fine of €251 million following two inquiries into a 2018 data breach. The breach affected approximately 29 million Facebook accounts globally, with about 3 million of those accounts based in the EU/EEA. The personal data exposed included users’ full names, email addresses, phone numbers, locations, places ...
The European Data Protection Board (EDPB) issued a detailed opinion on privacy implications for AI models under the GDPR. The opinion outlines key considerations including the application of the GDPR to AI Models trained on personal data, the applicability of the “legitimate interest” legal basis for training AI models on personal data, and the implications for AI models unlawfully trained ...
The Federal Trade Commission (FTC) has taken action against Mobilewalla, Inc., a data broker, for collecting and selling sensitive location data without obtaining proper consent from consumers. The FTC’s complaint alleges that Mobilewalla gathered data from real-time online ad bidding exchanges and third-party aggregators, often without consumers’ knowledge. This data included precise locations of individuals, such as visits to health ...
The European Union’s Cyber Resilience Act entered into force in December. The Act aims to establish horizontal cybersecurity requirements for products with digital elements to ensure they are placed on the market with fewer vulnerabilities, and that manufacturers take security seriously throughout a product’s lifecycle. This regulation intends to improve transparency regarding product support periods, enabling users to consider cybersecurity ...
Australia has enacted a new law designed to improve cyber security for the country. The law addresses several key areas including mandatory security standards for internet-connectable products, ransomware reporting obligations, information sharing for significant cyber incidents, and the establishment of a Cyber Incident Review Board.
The law mandates security standards for relevant internet-connectable products. Manufacturers and suppliers of these products ...
New user? Click here to register