The political agreement between the European Parliament and the Council of the European Union on the Cyber Resilience Act has been endorsed by the European Commission. The law imposes mandatory cybersecurity requirements for both hardware and software. Cybersecurity measures will be required for the life cycle of products.
Full details can be found here.
***
Following cases originating from Lithuania (regarding processing personal data for COVID-19 monitoring app) and Germany (real estate company retaining personal data longer than necessary), the Court of Justice of the European Union reaffirmed that a data controller should not receive a fine unless the contravention of the GDPR had been committed “intentionally or negligently”.
Full details can be found here.
***
The UK Information Commissioner John Edwards has warned that 2024 could be the year that people lose trust in artificial intelligence. Speaking at tech UK’s Digital Ethics Summit, the Commissioner continued to express that privacy, data protection and safeguarding people’s rights must be embedded into tech developments from the very start to maintain trust.
Full details can be found here.
***
The Dutch Data Protection Authority (AP) has urged companies to be more transparent regarding data protection practices. The AP has created guidelines to help companies build trust.
Full details can be found here.
Comments are closed.