The Cayman government has published draft regulations in preparation for the implementation of its Data Protection Law. Slovenia’s government adopted an EU General Data Protection Regulation implementation proposal, giving more power to the information commissioner but drawing criticism from her for its lack of protections. In Canada, calls for changes to make federal privacy laws applicable to political parties under federal legislation are making headlines. And in the U.S., Massachusetts Gov. Charlie Baker has signed the PATCH Act into state law; California’s Supreme Court upheld its DNA collection law, and a new bill would require social media platforms to identify automated accounts; Maryland’s legislature is considering a net neutrality bill; and Arizona has a new law allowing for the anonymity of campaign donors. Read about all this and more in this week’s Privacy Tracker legislative roundup.
LATEST NEWS
The EU Commission will this week propose giving consumer groups the right to seek compensation on behalf of consumers; the proposal also includes more transparency in the online marketplace, the Financial Times reports.
More
Argentina's Agency of Access to Public Information has issued Regulations Nos. 14/2018 and 15/2018, addressing the way users of databases are required to notify individuals of the use and changing the requirements for notification of CCTV monitoring, respectively, Marval O'Farrell & Mairal reports.
More
The Cayman government has published for consultation draft regulations in preparation for the implementation of its Data Protection Law, which will enter into force January 2019, Cayman News Service reports.
More
Sta reports that Slovenia has adopted an EU General Data Protection Regulation implementation proposal, giving more power to the information commissioner but drawing criticism from her for its lack of protections. The bill now heads to the National Assembly.
More
Arizona Gov. Doug Doucey has signed into law a bill that allows campaign donors to remain anonymous, despite local ordinances, Arizona Capital Times reports.
More
MediaPost reports on the California Consumer Privacy Act of 2018, comparing it to the GDPR and offering an overview of what it would mean for consumers and businesses.
More
A Maryland bill sponsored by Del. Bill Frick, D-Montgomery, seeks to give state residents more control over their online data and create a statewide net neutrality law, the Maryland Reporter reports.
More
ICYMI
Hoping to become a Privacy Law Specialist? IAPP Research Director Rita Heimes, CIPP/E, CIPP/US, CIPM, has the details on how to apply in this story for The Privacy Advisor.
More
The Polish data protection authority has published, in accordance with Article 35(4) of the GDPR, a draft list of processing operations that require mandatory data protection impact assessments. In this Privacy Tracker blog post, Marcin Lewoszewski and Anna Kobylańska of Kobylańska & Lewoszewski Kancelaria Prawna outline the types of processing included in the list, the most highly impacted business sectors, and next steps.
More
In this Privacy Tracker post, Marc Stauch, a research associate at Leibniz Universität Hannover, offers an analysis of Various Claimants v. Wm Morrisons, in which the High Court of England and Wales held a company "vicariously liable" for a deliberate data breach carried out by a disgruntled employee.
More
IAPP Associate Editor Ryan Chiavetta, CIPP/US, offers a rundown of the latest news surrounding calls to reassess Canada's privacy laws to place political parties under federal legislation.
More
In this exclusive for The Privacy Advisor, Florent Gastaud writes about Calzone, a new temporary model of WHOIS published by ICANN that substantially modifies its philosophy.
More
Jason Peterson, CIPP/US, CIPM, CIPT, and Lydia de la Torre, CIPP/US, explore the option in this exclusive for The Privacy Advisor of the potential for California to gain adequacy under the GDPR and whether it is headed that way.
More
US
In an article for Bloomberg, Noah Feldman writes that a recent ruling from a federal district court in Washington in the Sandvig v. Sessions case could have vast implications for how people are prosecuted for scraping data from websites.
More
Massachusetts Gov. Charlie Baker has signed the PATCH Act into state law, MassLive reports. The bill will give patients the ability to have a summary of payment forms for their health insurance be sent to themselves rather than to the policyholder of the insurance.
More
California lawmakers have proposed a bill aimed at forcing social media companies to identify automated accounts, Engadget reports.
More
The California Supreme Court upheld a state law that mandates DNA be collected from arrestees, the Electronic Frontier Foundation reports.
More
CANADA
The Canadian government is pushing through data breach notification requirements within the Digital Privacy Act, Global News reports.
More