Global Privacy Enforcement Network

IAB Tech Lab Releases Data Deletion Request Framework for Public Comment

Retrieved on: 
Thursday, November 2, 2023

NEW YORK, Nov. 2, 2023 /PRNewswire/ -- IAB Tech Lab, the global digital advertising technical standards-setting body, has introduced the Data Deletion Request Framework as an important addition to the Global Privacy Platform (GPP). This specification facilitates the handling of data deletion requests in accordance with the changing landscape of consumer privacy rights as dictated by privacy laws. IAB Tech Lab is inviting industry stakeholders to participate in a 30-day period for public comments, which will remain open until December 2, 2023.

Key Points: 
  • Public Comment for Data Deletion Request Framework Open For 30 Days Until December 2, 2023
    NEW YORK, Nov. 2, 2023 /PRNewswire/ -- IAB Tech Lab , the global digital advertising technical standards-setting body, has introduced the Data Deletion Request Framework as an important addition to the Global Privacy Platform (GPP).
  • IAB Tech Lab is inviting industry stakeholders to participate in a 30-day period for public comments, which will remain open until December 2, 2023.
  • The Data Deletion Request Framework offers significant advantages to brands, technology vendors, and publishers by establishing a standardized and interoperable framework that simplifies compliance with privacy laws.
  • To review and comment on the specification, please visit Data Deletion Request Framework .

Brussels Privacy Symposium 2022 Report

Retrieved on: 
Tuesday, March 21, 2023

Brussels Privacy Symposium 2022 Report

Key Points: 
  • Brussels Privacy Symposium 2022 Report
    On November 15, 2022, the Future of Privacy Forum (FPF) and the Brussels Privacy Hub (BPH) of Vrije Universiteit Brussel (VUB) jointly hosted the sixth edition of the Brussels Privacy Symposium on the topic of “Vulnerable People, Marginalization, and Data Protection.” Participants explored the extent to which data protection and privacy law including the EU’s General Data Protection Regulation (GDPR) and other data protection laws like Brazil’s General Data Protection Law (LGPD) safeguard and empower vulnerable and marginalized people.
  • Participants also debated balancing the right to privacy with the need to process sensitive personal information to uncover and prevent bias and marginalization.
  • The event also marked the launch of VULNERA, the International Observatory on Vulnerable People in Data Protection, coordinated by the Brussels Privacy Hub and the Future of Privacy Forum.
  • This Report outlines some of the most noteworthy points raised by the speakers during the day-long Symposium.

Event Report: FPF APAC and ABLI Report Launch Event and Panel on sidelines of 58th Asia Pacific Privacy Authorities (APPA) Forum in Singapore

Retrieved on: 
Monday, January 16, 2023

The report builds upon a series of 14 individual reports released throughout 2022 that provide an overview of the legal bases for processing personal data in each of these jurisdictions.

Key Points: 
  • The report builds upon a series of 14 individual reports released throughout 2022 that provide an overview of the legal bases for processing personal data in each of these jurisdictions.
  • This launch event took place on the sidelines of the 58th APPA Forum, hosted by Singapore’s Personal Data Protection Commission (PDPC) between November 29 and 30.
  • Many APPA members – which include privacy and data protection authorities from 18 jurisdictions in APAC and the broader Pacific region – as well as representatives from industry, civil society, and the legal community joined FPF and ABLI for this event.
  • (Policy Manager, FPF APAC) that outlined the scope and main finding of the report.
  • (Partner and Head of Technology, Media, and Telecommunications Practice, Rajah and Tann Singapore).
  • Role of consent
    Moderator
    Yeong Zee Kin *commenced the discussion by asking how regulators should think about the role of consent in the digital economy.
  • *Dr. Clarisse Girot *noted that due to advances in technology and changes in how organizations process personal data, consent has ceased to be meaningful.
  • In her view, while consent plays an important role in data protection laws, it has been overused in the APAC region.
  • *Leandro Aguirre shared the National Privacy Commission (NPC)’s experience in implementing consent requirements in the Philippines’ data protection law, the Data Privacy Act of 2012 (DPA).
  • He added that practitioners and clients may also believe that accountability approaches to processing personal data would impose greater burdens on organizations.
  • Instead, he suggested that regulators should permit organizations to make choices based on their own needs.
  • *Clarisse Girot *stressed that consent is still the main connecting point between jurisdictions in the APAC region.

Brussels Privacy Convening Focuses on Empowering Vulnerable and Marginalized People, Launches New Project

Retrieved on: 
Saturday, November 26, 2022

Brussels Privacy Convening Focuses on Empowering Vulnerable and Marginalized People, Launches New Project

Key Points: 
  • Brussels Privacy Convening Focuses on Empowering Vulnerable and Marginalized People, Launches New Project
    The Future of Privacy Forum (FPF), a global non-profit focused on data protection and privacy, and the Brussels Privacy Hub of Vrije Universiteit Brussel (VUB) will jointly present the sixth edition of the Brussels Privacy Symposium on November 15, 2022.
  • The in-person event will convene in Brussels, bringing together policymakers, academic researchers, civil society, and industry representatives to discuss privacy research and scholarship.
  • In line with this years topic, Vulnerable People, Marginalization, and Data Protection, participants will explore the extent to which data protection and privacy law including GDPR and other modern data protection laws like Brazils LGPD safeguard and empower vulnerable and marginalized people.
  • The event marks the launch of VULNERA, the International Observatory on Vulnerable People in Data Protection, led by the Brussels Privacy Hub and supported by the Future of Privacy Forum.

GPEN Sweep finds significant involvement of data protection authorities in COVID-19 solutions

Retrieved on: 
Monday, October 31, 2022

GPEN Sweep finds significant involvement of data protection authorities in COVID-19 solutions

Key Points: 
  • GPEN Sweep finds significant involvement of data protection authorities in COVID-19 solutions
    The OAIC took part in the GPEN Sweep 202021 which examined how privacy considerations have been taken into account by organisations responsible for various COVID-19 solutions and initiatives.
  • It also captured the level of engagement data protection authorities have had with those organisations in their jurisdiction.
  • An international privacy sweep has found that all participating data protection authorities (DPAs) have been actively involved in assessing the privacy implications of COVID-19 solutions and initiatives.
  • Background
    The aim of the 2020-21 GPEN Sweep is to understand how privacy considerations have been taken into account by the organisations responsible for various COVID-19 solutions and initiatives.

Survey of child-targeted websites and apps reveals progress on privacy protection, but parental involvement still the key

Retrieved on: 
Monday, October 31, 2022

= Survey of child-targeted websites and apps reveals progress on privacy protection, but parental involvement still the key =

Key Points: 
  • = Survey of child-targeted websites and apps reveals progress on privacy protection, but parental involvement still the key =
    Websites and mobile apps that target children should limit the amount of personal information that they collect about children, and ensure that adequate protective controls for parents are in place where personal information is collected.
  • This was the message from the Office of the Australian Information Commissioner (OAIC) and the 28 other privacy enforcement authorities that took part in the third Global Privacy Enforcement Network (GPEN) Privacy Sweep.
  • Globally, participating privacy enforcement authorities examined 1,494 websites and apps targeted at, or popular among, children.
  • Acting Australian Information Commissioner, Timothy Pilgrim, said that most of the websites and apps that the OAIC examined did not collect any personal information from children.
  • Less than a quarter of the websites and apps that we examined tailored their privacy messages to children, and three quarters of the websites or apps enabled children to be redirected off the platform, Mr Pilgrim said.
  • I also encourage parents and guardians to read privacy policies and to familiarise themselves with websites and apps that their children use, Mr Pilgrim said.
  • - Several authorities observed that, overall, websites and apps targeted at young children presented a more protective privacy environment for children than those that were simply popular with children.
  • - The OAICs results and the global results identified examples of good privacy practices and bad privacy practices on websites and apps targeted at children:


Some websites and apps encouraged parental involvement.
The OAIC has published a number of resources that developers can use to ensure that their websites and apps comply with the
*Privacy Act 1988 *(Cth) and contain adequate privacy protections, including: Guide to developing an APP privacy policy Mobile privacy: a better practice guide for mobile app developers

Protecting privacy in a cross-border world

Retrieved on: 
Monday, October 31, 2022

Protecting privacy in a cross-border world

Key Points: 
  • Protecting privacy in a cross-border world
    Each year more and more Australians are engaging in transactions and communications with people and companies all over the world; and using personal information in the process.
  • To ensure your privacy rights are protected when you engage with overseas based businesses, the OAIC is building stronger relationships with privacy authorities from around the globe.
  • In October 2015, Acting Australian Information Commissioner Timothy Pilgrim attended the International Conference of Data Protection and Privacy Commissioners in Amsterdam.
  • These relationships, initiatives and agreements give Australian privacy concerns an international perspective, and allow the OAIC to operate across borders through cooperation with privacy authorities from across the globe.

Privacy shortcomings of Internet of Things businesses revealed

Retrieved on: 
Monday, October 31, 2022

Privacy shortcomings of Internet of Things businesses revealed

Key Points: 
  • Privacy shortcomings of Internet of Things businesses revealed
    In April 2016, 25 privacy enforcement authorities from around the world looked into the way over 300 Internet of Things (IoT) devices communicate with their customers about privacy.
  • In Australia we examined 45 different devices, including fitness and health monitors, smart travel locks and thermostats, from both multinational and start-up businesses.
  • Our results revealed that overall, 71 per cent of devices did not provide a privacy policy that adequately explains how personal information is managed.
  • This review was a part of the Global Privacy Enforcement Networks (GPEN) annual privacy sweep, which looks at how businesses communicate privacy information, how personal information is collected, stored, distributed and the controls businesses provide to users to help them manage their personal information.