Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, reviewed the use of facial recognition technology by 23 professional soccer teams for ticket sales and stadium entry. The ANPD ordered the teams to "publish adequate information on the registration and biometric identification procedures for fans on their ticket sales platforms" and submit data protection impact assessments for the continued use of the facial recognition systems.
Full story
Author: IAPP IAPP News
The social platform X will challenge the Berlin Regional Court's ruling to force the platform to provide researchers with user data under the EU's Digital Services Act, Euractiv reports. Researchers from Democracy Reporting International and Gesellschaft für Freiheitsrechte sent a request for user data regarding the upcoming German election, though X claimed the request for data access was insufficient.
Full story
The Organisation for Economic Co-operation and Development’s AI Governance Working Party and the Global Partnership on AI published a report exploring the intellectual property considerations for organizations collecting and using data to train AI models. The report examined how data scraping to train AI impacts different stakeholders in the AI ecosystem, such as content creators, research institutions and AI data aggregators.
Full story
Latvia's Data State Inspectorate advised on how organizations can fix common issues within privacy notices to ensure consumers are aware of companies' standards. The DVI said organizations should develop notices that are transparent, accessible and provide "accurate and up-to-date information about the processing of personal data by a particular controller."
Full story
Belgium's Data Protection Authority issued a reprimand to the City of Antwerp after the school district's project to monitor noise pollution allegedly collected sensitive biometric data and violated the EU General Data Protection Regulation. The DPA ordered Antwerp to delete audio recordings collected during the project and suggested the city address potential privacy issues by conducting risk assessments in future projects.Â
Full story
The National Assembly of Ecuador experienced two cyberattacks aimed at accessing members' sensitive data, The Record reports. The assembly said it was able to "counteract the situation," and is currently working to determine if any information was breached.
Full story
New Zealand's Office of the Privacy Commissioner said it will investigate some public agencies' privacy practices after concerns were raised in two reports covering the government's census and COVID-19 data collection, respectively. Privacy Commissioner Michael Webster said, "The Privacy Act is very clear that agencies collecting personal information need to keep it safe and treat it with care. This responsibility extends to the use of third-party service providers."
Full story
Spain's data protection authority, the Agencia Española de Protección de Datos, discussed the proper application of privacy-by-design principles for public administration contracts. The AEPD explained how contracts and privacy laws require data protection in these documents both as an ethical and quality standard.
Full story
Services for generative AI platform DeepSeek were temporarily suspended in South Korea beginning 15 Feb. until improvements are made to the chatbot to improve compliance with the Personal Information Protection Act, according to the Personal Information Protection Commission. The China-based AI startup previously designated a domestic agent within South Korea and signaled its willingness to cooperate on alleged shortcomings related to how it processed personal data. Meanwhile, Texas Attorney General Ken Paxton will investigate DeepSeek under the state's Data Privacy and Security Act.
Full story
The U.K. Data Use and Access Bill passed its second reading in the House of Commons 12 Feb. The legislation has since been sent to a House of Commons Public Bill Committee, which will conduct a line-by-line review before preparing a report for the full body prior to 18 March. Editor's note: IAPP Staff Writer Alex LaCasse reported on the introduction of the DUA Bill last year.
Full story