In this week's Privacy Tracker global legislative roundup, France's data protection authority, the Commission nationale de l’informatique et des libertés, offered more information on the fine levied against Amazon by Luxembourg’s National Commission for Data Protection. Italy's data protection authority, the Garante, issued a 2.5 million euro fine over employee privacy. And the IAPP put together a graphic that identifies arguments raised by defendants attempting to avoid liability for potential California Consumer Privacy Act violations. 

THE LATEST

The IAPP has put together a graphic that identifies the arguments raised by defendants seeking to avoid liability for alleged CCPA violations.
More

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, said it will adopt a responsive approach toward enforcement of the General Data Protection Law, ZDNet reports.
More

France's data protection authority, the Commission nationale de l’informatique et des libertés, issued a response to the potential $888 million fine against Amazon by Luxembourg’s National Commission for Data Protection.
More

La Quadrature du Net provided additional information on the $888 million fine the Luxembourg data protection authority, the National Commission for Data Protection, levied against Amazon.
More

Italy's data protection authority, the Garante, issued a 2.5 million euro fine to food delivery service Deliveroo for improperly processing workers' personal data.
More

A Moscow court fined Google $41,000 for violating Russia's data localization law, the Associated Press reports.
More

The U.K. Information Commissioner's Office fined Yes Consumer Solutions 170,000 GBP for making 188,493 illicit marketing calls to individuals registered with the Telephone Preference Service.
More

The U.S. Federal Trade Commission announced Aristotle International is no longer part of the Children’s Online Privacy Protection Act Safe Harbor program.
More

ASIA-PACIFIC

Japan's data protection authority, the Personal Information Protection Commission, published a draft guide on international data transfers.
More

The National Privacy Commission of the Philippines is advocating for the adoption of data protection and security standards put forth by the International Organization for Standardization.
More

GUIDANCE

France's DPA, the CNIL, published its code of ethics.
More

The U.K. Information Commissioner's Office published guidance on direct marketing in the public sector.
More

The U.S. National Institute of Standards and Technology opened a comment period for the latest iteration of its "Draft NIST Special Publication (SP) 800-53A Revision 5, Assessing Security and Privacy Controls in Information Systems and Organizations."
More