Happy Halloween! Instead of a trick, you’re in for a fun treat. 🎃

October brought us an action-packed lineup of data privacy news stories and updates. Let’s get into it. 

🧠 X's new terms spark outrage as users brace for AI takeover of their content

• In a controversial move, X (formerly Twitter) updated its terms of service to allow the platform to use user-generated content to train its AI models. 
• Starting November 15, anyone who continues using the platform will essentially be giving X permission to analyze and utilize their content for AI training.
• The backlash has been swift, as artists and privacy advocates are worried about their work and personal data being exploited. Some are even deleting photos from their profiles in response.
• Users previously had the option to opt out of data sharing for AI training, but the clarity of the new terms has left many uncertain about their choices moving forward and is leading people to question their presence on the platform itself. Read the full story here.

🏛️ The EU Court’s new ruling tightens regulations on personal data use for ads

• The European Court of Justice just ruled that Meta Platforms must limit its use of personal data collected from Facebook for targeted advertising, even if users consent. 
• The court made it clear that social media networks can't use personal data indefinitely or without clear limits, reinforcing the principles of GDPR and its requirement for data minimization.
• The decision has significant implications for Meta and other ad-driven companies in the EU, as it emphasizes the necessity for strict data handling practices. 
• Meta stated it is committed to privacy but must now adapt its advertising strategies in light of the court's decision. You can learn more about the ruling here.

🇮🇪 Ryanair's customer verification process is under fire

• Ryanair is facing scrutiny from Ireland’s Data Protection Commission (DPC) over its controversial "Customer Verification Process" for tickets booked through third-party websites. This process requires customers to undergo multiple checks, including ID verification and facial recognition, which some may find inconvenient or invasive enough to abandon their tickets altogether. 
• The DPC is currently investigating whether Ryanair is complying with GDPR, particularly regarding transparency and data usage. The outcome could impact how the airline—and potentially others—handles customer data in the future.
• For more information, check out the full article. 

🤖 How ChatGPT can supercharge your cybersecurity and privacy practices

• The rapid increase of AI use seems frightening for our personal data, but ChatGPT can actually be an ally in boosting cybersecurity and privacy.
• Picture it this way: You can have a personalized assistant that helps you craft strong passwords and set up Multi-Factor Authentication while also educating you on how to navigate complex privacy settings. 
• ChatGPT can also help you stay informed about the latest data breaches or give you tips for spotting phishing scams. It can even guide you in setting up parental controls to protect your family and provides step-by-step support if you face a security incident. If you want to learn more, here are 7 Ways To Boost Cybersecurity And Privacy Using ChatGPT.

👀  Looking ahead: What are the effective dates of the U.S. state privacy laws?

We’re excited to announce our partnership with Webflow to introduce DataGrail Consent for Webflow customers looking to elevate their consent management. This app empowers businesses to provide an exceptional user experience while ensuring robust data privacy compliance. 

Here’s a sneak peek at our key features:

• Stay compliant with GDPR, CCPA, and more with our effortless, automated platform.
• Connect with Webflow’s Analyze and Optimize tools for seamless data management.
• Design customizable consent banners that reflect your brand without developer support.
• Oversee consent across multiple domains from a single dashboard.
• Make swift changes to your consent settings independently with no-code updates.

The perfect balance of personalization and privacy is now available right at your fingertips. Start your free trial today.

We also rolled out exciting enhancements to our privacy platform this month, making it easier than ever to manage and mitigate data risks. For example, Advanced Consent Mode support in Google Tag Manager allows you to measure marketing effectiveness while safeguarding user privacy. Also, our Live Data Map now features enhanced Risk Columns to help identify high-risk systems and new personal data category filters for streamlined oversight. 

Plus, we've introduced improved search and filtering capabilities in Risk Monitor and a new integration with CommerceTools for automated access/deletion requests. If you want to learn more about our latest updates, check out our monthly product release notes here.

Building Your First Data Privacy Team

• In this article, we outline three models for organizing a privacy team: centralization under a specific department, decentralization across teams, or a hybrid approach that combines both. Each model has its pros and cons, but the key takeaway is that prioritizing data privacy is essential for managing risks and fostering customer trust.

Intersections (and Collisions) Between Security, Compliance, and Privacy

• In this blog, the Vice President of Security and CISO at Drata explores the complex relationship between security, compliance, and privacy; but he emphasizes their shared goal of protecting sensitive information.

Are you passionate about privacy, legal, or security issues? Want to connect with like-minded professionals and stay ahead in a rapidly evolving landscape?

Become a member of our Privacy Community!

What You’ll Gain:

• Career Growth: Discover job opportunities tailored for privacy professionals and enhance your skills.
• Networking Opportunities: Connect with industry leaders and fellow members to exchange insights and best practices.
• Stay Informed: Engage in discussions about hot topics in ops, security, governance, risk, ethics, and compliance.

Whether you're just starting out or a seasoned pro, there’s a place for you here! Don’t miss out on the chance to be part of a vibrant network committed to advancing data privacy.

Until next time! 👋

Megan

This was sent to your email. If you do not wish to receive news and product updates in this format, please manage your preferences below.

© 2024 DataGrail, Inc. and/or its affiliates. All rights reserved.
Various trademarks held by their respective owners.