In this week’s global legislative roundup, the European Commission unveiled long-awaited draft regulations for the use of artificial intelligence. The European Data Protection Board adopted a statement on data transfer agreements between EU member states and third countries. The Federal Court of Australia ruled Google misled users regarding the details of its location data collection retained from its applications. And, in El Salvador, the Economic Commission voted 56–0 to pass the Personal Data Protection Law.

THE LATEST

In the U.S., the Illinois Senate unanimously passed a pair of bills strengthening privacy protections for sexual assault victims, CBS 2 Chicago reports.
More

ICYMI

For The Privacy Advisor, IAPP Senior Westin Research Fellow Jetty Tielemans broke down European Commission's long-awaited proposal for a regulation laying down harmonized rules on artificial intelligence and amending certain union legislative acts. 
More

ENFORCEMENT

In Canada, the Office of the Information and Privacy Commissioner of Ontario published its strategic priorities for 2021 through 2025.
More

European Data Protection Supervisor Wojciech Wiewiórowski released his office's 2020 Annual Report.
More

Italy’s data protection authority, the Garante, issued an opinion that the Ministry of the Interior’s use of the Sari Real Time system does not comply with privacy legislation.
More

Norway's data protection authority, Datatilsynet, published its annual report for 2020.
More

During a U.S. Senate Committee on Commerce, Science, and Transportation hearing, four FTC commissioners largely agreed the Federal Trade Commission should take steps to protect consumers’ digital privacy if Congress does not enact a federal law, CNBC reports.
More

U.S. FTC Acting Chairwoman Rebecca Kelly Slaughter issued a statement on how the Supreme Court of the United States' decision in the AMG Capital Management LLC v. FTC case affects the agency's enforcement capabilities.
More

ASIA-PACIFIC

The Federal Court of Australia ruled Google misled users regarding the details of its location data collection retained from its applications, The Sydney Morning Herald reports.
More

EUROPE

France's Council of State ruled national security concerns justify the retention of data for law enforcement investigations.
More

TikTok could face a billion-dollar claim in London over allegations the video application, through parent company ByteDance, illegally collected personal information of millions of European children to benefit third parties, Fox Business reports.
More

A planned U.K. “security by design” law to improve the security of consumer devices will include smartphones, TechCrunch reports.
More

LATIN AMERICA

The Legislative Assembly of El Salvador's Economic Commission voted 56–0 to pass the Personal Data Protection Law.
More

US

A proposed bill would ban U.S. law enforcement agencies from buying information from Clearview AI, Motherboard reports.
More

The National Law Review reports Maine and North Dakota adopted the National Association of Insurance Commissioners data security model law.
More

GUIDANCE

Belgium’s Data Protection Authority released recommendations on data “sanitisation” and destruction techniques.
More

The European Data Protection Board adopted a statement on data transfer agreements between EU member states and third countries.
More

The EDPB also published its guidelines on the application of Article 65(1)(a) of the EU General Data Protection Regulation.
More

U.K. Deputy Information Commissioner Steve Wood outlined the Information Commissioner's Office's opinion on how data protection can be applied to the proposed digital identity framework.
More

The U.S. FTC published recommendations for organizations using AI.
More