The Irish Data Protection Commission (DPC) has determined that Meta Ireland infringed Article 46(1) of the GDPR when it “continued to transfer personal data from the EU/EEA to the USA following the delivery of the CJEU’s judgment in Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems.” The DPC has given Meta Ireland 6 months to find a solution. This is just enough time to create the possibility of a road forward; a possibility which is contained primarily in the effective implementation of proposed European – U.S. Data Privacy Framework on the part of the U.S. and the EU.

The World Privacy Forum is pleased to announce Executive Director Pam Dixon has been invited to serve as the Senior Special Rapporteur for two workshops at the 2023 ID4Africa Annual General Meeting which will take place in Nairobi, Kenya 23-25 May. ID4Africa is regarded as the single most important gathering of identity experts and authorities in the world. The focus of Dixon’s rapporteur work will include policy and regulatory challenges for digital identity: the African perspective (Workshop 2), and privacy and data protection in identity systems (Workshop 4)…

Earlier this month, WPF attended a joint conference focused on the shifting dynamics of how the Common Rule that governs human subject research in the US will be interpreted amidst new technological shifts such as AI. The department of Health and Human Services is seeking to define what the next steps and new policy frameworks should be to ensure the Common Rule protects individuals in current and future research environments. Details on the presentations, conversations, and key takeaways in the post.

The World Privacy Forum is delighted to announce that award-winning technology journalist Kate Kaye will join WPF as its deputy director.  As a longstanding technology journalist, Kate has been at the forefront of emerging technology, data privacy, and governance issues. Her reporting exposed the earliest forms of online political microtargeting and voter data use, explained

The FTC announced its first enforcement action under its Health Breach Notification Rule. This rule applies to entities that are not covered under HIPAA. The announcement of the proposed order was filed by the U.S. Department of Justice on behalf of the FTC against the “…telehealth and prescription drug discount provider GoodRx Holdings, Inc. for