In this week's Privacy Tracker global legislative roundup, Germany adopted a draft Patient Data Protection Act. Head of CyberBRICS Luca Belli wrote about the data protection frameworks emerging in the BRICS countries. The European Data Protection Board announced guidance for data processing related to COVID-19. And in the U.S., Microsoft's Eric Tierling, CIPP/E, CIPM, CIPT, and FieldFisher's Paul Lanois, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM, CIPT, FIP, broke down the New York Stop Hacks and Improve Electronic Data Security Act.  

THE LATEST

In this piece for Privacy Tracker, Microsoft's Eric Tierling, CIPP/E, CIPM, CIPT, and FieldFisher's Paul Lanois, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM, CIPT, FIP, broke down the New York SHIELD Act and what it may mean for businesses.
More

MediaPost reports activist David Lowery appealed Google Street View's $13 million final settlement over improper data collection in 2010.
More

ICYMI

In this piece for Privacy Tracker, Head of CyberBRICS Luca Belli wrote about how the data protection frameworks project has "started the first initiative to develop comparative and systematized analyses of the digital policies developed by BRICS countries," as well as the results of its initial probe.
More

ENFORCEMENT

Following its 20th plenary session, the European Data Protection Board announced the scope of its guidance for data processing related to combating COVID-19 will focus on geolocation data and health data used for research purposes.
More

Computer Weekly reports British Airways and Marriott International negotiated with the U.K. Information Commissioner's Office to extend the probes into their EU General Data Protection Regulation violations.
More

Tapplock settled U.S. Federal Trade Commission allegations that its internet-connected smart locks falsely claimed to appropriately secure user data.
More

ASIA-PACIFIC

ZDNet reports the Australian Commission for Law Enforcement Integrity formally voiced its support for the pending Telecommunications Legislation Amendment (International Production Orders) Bill 2020.
More

EUROPE

The French data protection authority, the CNIL, has released a Q&A regarding a user's right to be forgotten.
More

The CNIL also published a post on the ISO 27701 standard.
More

Germany's Federal Cabinet announced the adoption of the draft Patient Data Protection Act.
More

In Ireland, the Data Protection Commission released its report on the use of cookies and other tracking technologies.
More

Turkey's data protection authority, the KVKK, announced a fine of 18,000 TL for a violation of the purpose limitation principle in the country's Law on the Protection of Personal Data No. 6698.
More

US

The city of Chicago and Equifax have agreed to a $1.5 million settlement related to the credit-reporting firm's 2017 data breach, the Chicago Daily Law Bulletin reports.
More