In a blog post, European Data Protection Supervisor Wojciech Wiewiórowski said cybersecurity and data protection are "inseparable." Noting the EDPS will participate in the EU's Cybersecurity Month in October, Wiewiórowski said the EDPS supports "a legal, strategic, and operational approach to cybers...

The U.S. Department of Commerce's National Telecommunications and Information Administration announced a request for comment on "best practices to protect minors' mental health, safety and privacy online." The aim is to identify risks to children online as well as understand current industry best pr...

The EU Data Governance Act is officially a go — the regulation became applicable on 24 Sept. The purpose of the DGA was not to confuse privacy professionals with another acronym but, rather, to create a mechanism to enable the safe use of public sector data, establish rules for data intermediary ser...

India's Digital Personal Data Protection Act, 2023 creates a new framework for the protection of digital personal data, offering four broad rights to "data principals" and setting compliance tasks for "data fiduciaries." Spice Route Legal Partner Mathew Chacko, Counsel Aadya Misra and Associate Ajee...

The European Data Protection Board adopted guidelines on application of Article 37 of the Law Enforcement Directive. In addition to "practical guidance," the guidelines "provide clarity on the legal standard for appropriate safeguards" when transferring personal data from EU countries to third count...