A potential path forward after the Irish Data Protection Commission enforcement decision regarding Meta Ireland

The Irish Data Protection Commission (DPC) has determined that Meta Ireland infringed Article 46(1) of the GDPR when it “continued to transfer personal data from the EU/EEA to the USA following the delivery of the CJEU’s judgment in Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems.” The DPC has given Meta Ireland 6 months to find a solution. This is just enough time to create the possibility of a road forward; a possibility which is contained primarily in the effective implementation of proposed European – U.S. Data Privacy Framework on the part of the U.S. and the EU.

WPF Executive Director to serve as Senior Rapporteur for ID4Africa workshops regarding policy and regulatory challenges for digital identity and privacy and data protection in ID systems

The World Privacy Forum is pleased to announce Executive Director Pam Dixon has been invited to serve as the Senior Special Rapporteur for two workshops at the 2023 ID4Africa Annual General Meeting which will take place in Nairobi, Kenya 23-25 May. ID4Africa is regarded as the single most important gathering of identity experts and authorities in the world. The focus of Dixon’s rapporteur work will include policy and regulatory challenges for digital identity: the African perspective (Workshop 2), and privacy and data protection in identity systems (Workshop 4)…

Emerging Technologies, Human Subject Research, and the Common Rule: High level overview of the 2023 OHRP Research Community Forum

Earlier this month, WPF attended a joint conference focused on the shifting dynamics of how the Common Rule that governs human subject research in the US will be interpreted amidst new technological shifts such as AI. The department of Health and Human Services is seeking to define what the next steps and new policy frameworks should be to ensure the Common Rule protects individuals in current and future research environments. Details on the presentations, conversations, and key takeaways in the post.

Kate Kaye joins WPF as Deputy Director

The World Privacy Forum is delighted to announce that award-winning technology journalist Kate Kaye will join WPF as its deputy director.  As a longstanding technology journalist, Kate has been at the forefront of emerging technology, data privacy, and governance issues. Her reporting exposed the earliest forms of online political microtargeting and voter data use, explained

FTC takes first enforcement action under its Health Breach Notification Rule; also takes action against misrepresentation of HIPAA compliance

The FTC announced its first enforcement action under its Health Breach Notification Rule. This rule applies to entities that are not covered under HIPAA. The announcement of the proposed order was filed by the U.S. Department of Justice on behalf of the FTC against the “…telehealth and prescription drug discount provider GoodRx Holdings, Inc. for