The Texas AG's office is challenging the U.S. Department of Health and Human Services (HHS) in court, looking to peel back a patient privacy amendment to HIPAA that protects out-of-state medical records about abortions.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
A privacy class action against Google that was dismissed in 2022 has been given new life by an appeals court. Privacy lawsuit says Chrome Sync feature collected personal information from those that chose to opt out of it, ignoring their preference to separate their Google accounts from their activity in the Chrome browser.
Two of the largest retailers in the United States have announced plans to shift to digital price tags within the next few years, and the concept has raised controversy due to the possibility of price gouging as well as privacy concerns.
China’s digital ID trial has stoked privacy concerns, and questions have also been raised about what may happen if a citizen's ID is revoked by the government.
As businesses harness the power of artificial intelligence (AI) to derive insights and streamline operations, the need for robust data privacy standards and effective governance frameworks has never been more critical.
An internal Google document not meant for public view catalogs a long string of privacy breaches previously unknown outside of the company. While each of the items in the database leak is small and deals with incidents that may have involved just one individual, there are thousands in total, spanning six years of company history.
While the APRA is still a “discussion draft,” it aims to provide a national data privacy and security framework outlining consumer rights and data management requirements. Under the APRA, companies would have to limit the types of consumer data they collect, retain, and use, allowing only data needed to operate their services.
The president signed a bill that requires owner ByteDance to either divest itself of the massively popular app or have it removed from American app stores. National security concerns have driven this process forward, but ByteDance still has the right to challenge the action in court and any ban would be instituted no sooner than January 2025.
Aimed at restricting the flow of sensitive American data to "countries of concern" like China and Russia, this new executive order, signed by President Biden in February, has been framed by some as a step toward safeguarding the personal data of U.S. citizens from foreign threats.
The market for location data is staggering, surpassing $12 billion annually. Yet, it's riddled with privacy pitfalls. Precise location is particularly concerning among the trove of personal data brokers collect.









