In this week's Privacy Tracker global legislative roundup, Connecticut is on its way to becoming the the fifth U.S. state with comprehensive privacy legislation. The European Data Protection Board committed to further cooperation on EU General Data Protection Regulation enforcement. The Court of Justice of the European Union ruled in favor of representative actions for GDPR claims. And Brazil's data protection authority offered updated guidance for defining processing agents and data protection officers under the General Data Protection Law.

THE LATEST

The Office of the U.S. Trade Representative issued a report that voiced concerns regarding potential global issues with India's Data Protection Bill and draft Non-Personal Data Governance Framework, Inc42 reports.
More

ICYMI

Journalist Luca Bertuzzi offered the latest on the U.K.'s proposed national data strategy, including what the country's data protection future may look like and where it could split from the EU’s.
More

The Connecticut General Assembly gave final approval on what will be the U.S.'s fifth comprehensive state privacy law. IAPP Staff Writer Joe Duball provides reactions to Senate Bill 6's passage, its substance and its standing among the handful of existing state laws.
More

ENFORCEMENT

The European Data Protection Board agreed to enhance enforcement cooperation of the EU General Data Protection Regulation and to expand methods used.
More

Indonesia's Ministry of Communication and Information Technology, Kominfo, announced ongoing investigations into 11 mobile applications over potential misuse of personal data.
More

ASIA-PACIFC

India’s National Health Authority modified the draft Health Data Management policy with an eye toward increasing the privacy of citizens’ personal data, Live Mint reports.
More

EUROPE

Euractiv reports the Court of Justice of the European Union ruled EU consumer advocacy groups have a right to file lawsuits over alleged violations of the EU General Data Protection Regulation if national law permits it.
More

Norway's data protection authority, Datatilsynet, issued guidance around the sharing and processing of children's personal data and consent, noting the rules "are slightly different than for adults."
More

LATIN AMERICA

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, released an updated version of its guidance on definitions of data processing agents and data protection officers under the General Data Protection Law.
More