The Canadian government has released the final version of the federal data breach notification regulations, which will go into effect Nov. 1. Portugal’s Council of Ministers has approved a draft law to implement the EU General Data Protection Regulation. The European Commission released a proposal aimed at allowing law enforcement agencies to access data stored on tech companies’ servers in the U.S. and in other EU member states. And in the U.S., House Democrats are proposing new privacy legislation on the heels of Facebook CEO Mark Zuckerberg’s testimony, a package of proposals aiming to combat the opioid epidemic involves prescription data-sharing provisions, Arizona has an expanded data breach notification law, and the Colorado Senate Judiciary Committee unanimously passed a bill to keep juvenile autopsy records from becoming public record. 

LATEST NEWS

Ontario’s legislature is considering Bill 14, the Personal Information Protection Act, Canadian Marketing Association reports.
More

Portugal’s Council of Ministers has approved a draft law to implement the EU General Data Protection Regulation, Global Compliance News reports.
More

ADVERTISEMENT

Radarfirst- Looking for clarity and confidence in every decision? You found it.

A package of proposals introduced by leaders of the U.S. Senate health committee aims to combat the opioid epidemic, Health Data Management reports. The proposals include leveraging Prescription Drug Monitoring Programs databases, streamlining data sharing between state PDMPs.
More

The U.S. House has passed the Protecting Children from Identity Theft Act, which aims to prevent a common type of identity theft used against children and new immigrants, Law360 reports.
More 

U.S. Sen. Brian Schatz, D-Hi., has introduced legislation aimed at helping the Federal Communications Commission enforce the current rules around so-called robocalls, Big Island Now reports.
More 

The National Law review reports on Arizona’s expanded data breach notification law signed into law April 11.
More

A federal magistrate judge in San Francisco has dismissed many of the claims that Uber violated California state and federal privacy laws in a case that has Lyft drivers suing Uber for creating spyware to track them, The Recorder reports.
More

The Colorado Senate Judiciary Committee unanimously passed a bill that would keep juvenile autopsy records from becoming public record, Steamboat Today reports.
More

The 12th Court of Appeals in Texas has ruled that the state’s so-called revenge porn law violates the First Amendment of the U.S. Constitution, WLWT reports. The ruling only blocks the law in the counties covered by that court.
More

ICYMI

In this article for The Privacy Advisor, IAPP Westin Fellow Müge Fazlioglu, CIPP/US, looks at the Article 29 Data Protection Working Party’s revised guidelines on transparency under the EU General Data Protection Regulation.
More 

The lengthy Schrems II case decided by the Irish High Court in October 2017 left open which questions would be referred to the Court of Justice of the European Union. Those 11 questions have now been published by the court, and standard contractual clauses, as well as possibly Privacy Shield, will become subject to review by the CJEU. In this exclusive for The Privacy Advisor, Thomas Shaw, CIPP/E, CIPP/US, discusses the court's 11 essential questions.
More

In this IAPP white paper, Emily Cramer, CIPP/US, offers a comparative analysis of the U.S. and EU children's data protection frameworks for the education technology industry, addressing the particular differences between obtaining consent under the EU General Data Protection Regulation and the Children's Online Privacy Protection Act and Family Educational Rights and Privacy Act in the U.S.
More

Who should expect big fines come May 26, 2018? Those whose data protection infractions are "deliberate, persistent, negligent," U.K. Information Commissioner Elizabeth Denham said at today's IAPP Data Protection Intensive in London. Privacy Advisor Editor Angelique Carson, CIPP/US, was on-site and has the story. 
More 

US

Following Facebook CEO Mark Zuckerberg’s two-day stint on Capitol Hill, House Democrats are working on introducing proposals for new privacy legislation, Axios reports. The proposed bill would implement concrete protections for the use and sharing of personal data, but according to a Democratic House aide, specifics are still being worked out.
More

Following the passage of the Clarifying Lawful Overseas Use of Data Act, the U.S. Supreme Court dropped a case involving Microsoft and the Department of Justice, declaring the case moot, Reuters reports.
More

A Federal Trade Commission representative spoke in front of the U.S. Senate Committee on Commerce, Science and Transportation detailing the agency’s efforts to combat robocalls.
More

Commissioner Terrell McSweeny announced she will step down from her position within the U.S. Federal Trade Commission April 27.
More

Commissioner Mignon Clyburn announced she will step down from her position at the U.S. Federal Communications Commission, Politico reports.
More

ASIA-PACIFIC

To mark 25 years of New Zealand’s Privacy Act, Privacy Commissioner John Edwards took to YouTube to deliver a message about the anniversary and upcoming privacy legislation.
More

CANADA

The Canadian government has released the final version of the federal data breach notification regulations, IT World Canada reports. The new rules will go into effect Nov. 1.
More

Speaking in front of a parliamentary committee, Privacy Commissioner of Canada Daniel Therrien once again called on the federal government to reform federal laws to have political parties covered under privacy legislation, the Ottawa Citizen reports.
More

EUROPE

The European Commission released a proposal aimed at allowing law enforcement agencies to access data stored on tech companies’ servers in the U.S. and in other EU member states, The Wall Street Journal reports.
More

Reuters reports the European Commission has proposed including biometric information on EU citizens’ identity cards. Under the proposal, identity cards will contain an image of two fingerprints and a facial image.
More

The Article 29 Working Party has released guidance on encryption and transparency.
More

The U.K. High Court ruled in favor of one man who sought to have search results about a past crime removed from Google but against another man, BBC News reports.
More

At the IAPP Europe Data Protection Intensive 2018, Hogan Lovells Partner Eduardo Ustaran, CIPP/E, discussed the future of U.K. data privacy laws post-Brexit, Computer Weekly reports. Ustaran said an adequacy decision would be the best way to keep data flows going between the U.K. and the EU, but the Investigatory Powers Act could play a major role in an adequacy ruling.
More