If passed, entities that process the PI of 500 or more unique individuals must obtain explicit, informed opt-in consent to process PI (consent cannot be inferred from an interaction or use of a product or service), allow individuals to opt-out of processing at any time, and are prohibited from targeted advertising based on an individual’s personal characteristics (e.g., race, sex, ethnicity), processing biometric information without prior written notice and consent, or using an automated decision system without first conducting an impact assessment.
Related Posts
Luxury Hotels Under Threat Following MGM Hack
Following the recent attack on MGM Resorts it seems cyber attackers are targeting luxury hospitality venues to steal log in information.
Zoom To Use User Content to Train AI
Zoom's recently updated terms and conditions allow for some concerning practices surrounding AI which has caused concern in the industry
Publisher Faces $18.5M Fine From FTC
The FTC have given a publisher a large civil penalty for using dark patterns and misleading information across their website.