In this week’s Privacy Tracker global legislative roundup, read about the Supreme Court ruling in India declaring privacy a fundamental right. Also, Bermuda’s new Personal Information Protection Act is scheduled to be in full force in December; the U.K. has announced its plans for aligning its data protection practices with the EU; and the German Ministry of the Interior recently published the English translation of the new Federal Data Protection Act. In the U.S., Delaware has amended its data breach notification law; an update to Illinois law requires state agencies to report data breaches to residents within five days; and the grace period for New York’s financial cybersecurity law has ended. 

LATEST NEWS

Bermuda’s new Personal Information Protection Act is scheduled to be in full force in December, and as The Royal Gazette reports, will have a significant impact on employers handling of employee data.
More

Lexology reports that the Ontario court of appeal has created a new privacy right in a case where energy consumption data was shared with police, data which they then relied on to obtain a warrant for the residence.
More

ADVERTISEMENT

Syrenis ad, a privacy professional's AI checkilist

Economic Times reports, India’s minister for law and IT Ravi Shankar Prasad has said the data protection law is likely to be in place by December and it will comply with the Supreme Court's judgment on right to privacy.
More

Illinois’ governor signed into law updates to the state’s Personal Information Protection Act requiring state agencies to report data breaches to residents within five days, reports State Scoop.
More

The grace period for New York’s financial cybersecurity regulation is now over, reports The New York Law Journal.
More

Lexology has a roundup of cybersecurity laws passed in Texas’s 85th regular legislative session, many of which go into effect Sept. 1.
More

ICYMI

A significant legal ruling on privacy came out of India Thursday after the nation's top court ruled that citizens have a fundamental right to privacy under Article 21 of India's constitution. In this post for Privacy Tracker, Jedidiah Bracy, CIPP, rounds up today's coverage and includes reaction from government officials, lawyers and the World Privacy Forum. 
More

In this installment of the GDPR matchup series, Pablo Palazzi and Andrés Chomczyk of Allende & Brea compare Argentina’s draft Data Protection Act with the GDPR.
More

On Aug. 4, the European Commission opened a public consultation to “help Europe’s law enforcement agencies combat crime in the digital age.” The Commission is stepping up plans that have been on the table since 2015 to address the so-called e-evidence issue. Jennifer Baker reports in this exclusive for The Privacy Advisor.
More

US

Delaware’s amended data breach notification law takes effect in April of next year and adds strict new requirements, Hunton & Williams Privacy & Information Security Law Blog reports.
More

CANADA

An employee of the Royal Newfoundland Constabulary has been convicted of illicitly accessing individuals’ files, the first conviction under the province’s 2015 Access to Information and Protection of Privacy Act, CBC News reports.
More

EUROPE

The German Ministry of the Interior recently published the English translation of the new Federal Data Protection Act, Bundesdatenschutzgesetz, Hogan Lovells’ Chronicle of Data Protection reports.
More

The BBC reports that the U.K. government will seek a trans-border data flow pact with the EU in order to facilitate the continued free flow of personal data. 
More

The U.K. government has released a position paper announcing it plans to align with the EU General Data Protection Regulation.
More

Bloomberg Technology reports the internet archives maintained by the British Library will be exempt from recently introduced U.K. privacy legislation designed to expand the “right to be forgotten.”
More