In this week’s Privacy Tracker legislative roundup, read about the German Parliament’s passing of a Data Protection Law meant to implement the EU General Data Protection Regulation despite some saying it violates the GDPR. In the U.K., the Digital Economy Bill has received Royal Assent. China’s draft Measures for the Security Assessment of Personal Information and Critical Data Leaving the Country may significantly expand the cybersecurity law they intend to implement. And in the U.S., senators have introduced legislation to give consumers controls around their personal information collected by telecommunications companies, and Federal Communications Commission Chairman Ajit Pai plans to roll back Obama-era net neutrality rules. 

LATEST NEWS

Germany’s Parliament passed a Data Protection Act to implement the EU GDPR despite criticism, reports Technology Law Dispatch.
More

Government Computing reports, the U.K. Digital Economy Act, which puts regulations on broadband and digital infrastructure, among other things, has been given Royal Assent.
More

The U.S. Department of Homeland Security has issued new guidelines limiting the rights of immigrants and nonimmigrant foreigners in light of President Trump’s recent executive order, reports Law360.
More

Alabama is forming a task force to address concerns about victims’ private information being on a state website of court records, reports The Associated Press.
More

Arizona Gov. Doug Ducey signed into law a bill preventing the sale of student data by third-party providers for advertising, among other things.
More

A bill introduced in the California Senate would require Privacy by Design for all internet of things devices, reports The National Law Review.
More

A Michigan bill aims to protect the privacy of parents who surrender their newborn to a hospital within 72 hours of birth, reports Morning Sun.
More

VT Digger reports, the Vermont House has passed a scaled-down version of its data brokers’ bill, which requires the state Department of Financial Regulation and the attorney general to proposed a regulation to the relevant committees by December 15.
More

ICYMI

The European Commission has written to EU privacy regulators to express concern over their interpretation of the data portability clause in the General Data Protection Regulation. Specifically, the commission appears to be worried that the regulators have interpreted too broad a scope for the GDPR's Article 20, David Meyer reports in this exclusive for The Privacy Advisor.
More

Scott Livingston of Simone IP Services writes for The Privacy Tracker that China’s draft Measures for the Security Assessment of Personal Information and Critical Data Leaving the Country to appear to "expand the scope of China’s data localization and security review requirements to a wider range of companies than originally thought covered by the Cybersecurity Law."
More

Radar's Global Privacy Officer and Senior Counsel Alex Wall, CIPP/E, CIPP/US, offers a summary of the Philippines Privacy Act and its implementing regulations in this Privacy Tracker post.
More

At the IAPP's Global Privacy Summit in Washington last week, Acting FTC Chairman Maureen Ohlhausen discussed with former FTC Commissioner Julie Brill her priorities for the agency while she's at the helm. Angelique Carson, CIPP/US, editor of The Privacy Advisor, was there and has the story. 
More

US

Federal Communications Commission Chairman Ajit Pai announced his plans to roll back Obama-era regulations allowing net neutrality and treat broadband providers as a Title II common carrier service.
More

Sens. Richard Blumenthal, D-Conn., and Tom Udall, D-N.M., have released new legislation, called the Managing Your Data Against Telecom Abuses Act, which would give consumers controls around their personal information collected by telecommunications companies.
More

President Donald Trump has yet to produce a cybersecurity plan, and there are no signs of one coming soon, CNet reports.
More

Following a comment period, the U.S. Federal Trade Commission has issued its final consent order with Turn, an ad-tech company that allegedly tracked consumers online and across devices "even after consumers took steps to opt out of such tracking."
More

The Maine Senate has given final approval to the Real ID bill, and it now awaits Governor Paul LePage's signature, the Portland Press Herald reports.
More

ASIA PACIFIC

The Indian government has told the country's Supreme Court that the Telecom Regulatory Authority of India is working to create a data protection framework that will go live by October of this year, GovInfoSecurity reports.
More

In what some are calling a "landmark decision," the Singapore High Court has dismissed two civil applications from QOTD Film Investment and Voltage Pictures requiring internet service providers to provide the IP addresses of those customers who had illegally downloaded the films "Queen of the Desert" and "Fathers & Daughters," IP Pro reports.
More

EUROPE

In an interview with Independent.ie, Ireland Data Protection Commissioner Helen Dixon said noncompliant companies should expect to receive the full financial penalties under the General Data Protection Regulation when it goes into effect.
More

European Data Protection Supervisor Giovanni Buttarelli released his opinion on the ePrivacy Regulation, stating the General Data Protection Regulation will remain incomplete until the regulation is strengthened.
More