WPF comments to the US Federal Trade Commission regarding Everalbum proposal

The World Privacy Forum submitted comments to the US Federal Trade Commission regarding its proposed consent order regarding In the Matter of Everalbum, Inc. The FTC alleges that Everalbum misrepresented to its users the circumstances in which the company would utilize face recognition on its users’ photos. The Commission’s complaint also alleges that Everalbum utilized

Addressing Cross-Border Spillovers in Data Policy: The Need for a Global Approach

Global debates about data governance standards have primarily reflected the priorities and needs of rich countries, with less wealthy countries left in the role of “standards takers.” More needs to be done to ensure that digital governance policies pursued by the world’s largest economies do not create unintended consequences that make it harder for other countries to support a strong domestic digital economy and participate in the global digital economy. This is a joint blog post by Michael Pisa, Center for Global Development, WPF’s Pam Dixon, and Benno Ndulu, Oxford Professor.

FTC proposes precedent-setting face recognition settlement: photo app company must delete consumers’ photos and the algorithmic models it developed using the photos

The FTC has proposed a crucially important settlement with a photo app developer, Everalbum Inc., which the FTC says “deceived consumers about its use of facial recognition technology and its retention of the photos and videos of users who deactivated their accounts.”  The proposed FTC settlement will require the company to obtain consumers’ express consent

Comments of World Privacy Forum to EDPB re: data localization and privacy

WPF provided feedback on the European Data Protection Board’s Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data. In responding to the Recommendations, we found several areas which, if improved, would enhance the stated goals of the EDPB for facilitating free flow of data while preserving

New Zealand’s New Privacy Law 2020 is Now in Force

New Zealand has meaningfully updated its privacy law,  The Privacy Act 2020, which took force December 1.  The new Privacy Act 2020 is a significant advancement of New Zealand’s privacy law, and encompasses numerous changes, including:  Data Breach Reporting Obligations: There are new reporting obligations for data breaches. Companies are required to notify the Office