Global News Roundup — August 6–13, 2018

In this week’s Privacy Tracker legislative roundup, read about recently approved final text that integrates the EU General Data Protection Regulation into Italian privacy law. In Indonesia, a lawsuit was filed looking into the data misuse of Facebook and Cambridge Analytica. In Germany, the Higher Regional Court in Cologne has denied the Internet Corporation for Assigned Names and Numbers’ appeal for an injunction against domain name registrar EPAG. In the U.S., the Federal Trade Commission is seeking comment on whether the agency should have more enforcement authority over corporate privacy and data security practices, and a coalition of organizations has sent a letter to California lawmakers pushing for changes to the California Consumer Privacy Act of 2018.

LATEST NEWS

Italy’s Board of Ministries approved final text that will integrate the GDPR into Italian privacy law, Lexology reports.   
More

A lawsuit looking into the data misuse of Facebook and Cambridge Analytica was filed in Indonesia. The case will begin the third week of August, The Jakarta Post reports. Plaintiffs argue that since Facebook is recognized as an electronic system provider under the country’s Electronic Information and Transaction Law, the company is subject to Indonesian laws.
More

Rep. Kathleen Rice, D-N.Y., has introduced a new bill, the Screening with Dignity Act, to Congress that would require the Transportation Security Administration to adopt new training methods and privacy protections, Gizmodo reports.
More

New York state Senator Luis Sepúlveda, D-Bronx, is planning to introduce the New York Consumer Privacy Act of 2019, requiring social media companies that operate in the state to give consumers the ability to block their data from being bought and sold, the New York Post reports.  
More

ICYMI

In this second in a series of three posts for Privacy Perspectives on the obstacles facing a comprehensive federal privacy law in the U.S., Privacy and Information Policy Consultant Robert Gellman discusses two of the most significant policy issues: the private right of action and the federal preemption of state law.
More

In this Privacy Tracker post, Timothy Banks, CIPP/C, CIPM, CIPT, offers an analysis of Alberta’s new breach notification law, including who it covers, responsibilities, and exceptions and adds that with Alberta's enforcement record, covered entities would be wise to take the new regulations seriously. 
More

US

The U.S. Department of the Treasury is pushing for a national data breach notification standard, SC Magazine reports. The Treasury also released more than 80 recommendations in its “Nonbank Financials, Fintech and Innovation” report.
More

The U.S. Department of Defense has sent a memo alerting service members that a new policy prohibits the use of “geolocation devices” in deployed locations.
More

The Federal Trade Commission is looking for public comment on whether the agency should have more enforcement authority over corporate privacy and data security practices. The FTC published a notice in the Federal Register stating it will be accepting comments until Aug. 20, adding the agency is also accepting comments on the intersection of privacy, big data and competition.
More

House Homeland Security Committee Chairman Michael McCaul, R-Texas, urged the U.S. Senate to pass a cyber reorganization bill that would rename and streamline the Department of Homeland Security’s cyber wing into the Cybersecurity and Infrastructure Security Agency, The Hill reports.
More

A District of Columbia federal appeals court denied LabMD Founder Michael Daugherty’s call for a review of a ruling protecting FTC lawyers from allegations of unfair enforcement actions, HealthITSecurity reports.
More

The Centers for Medicare & Medicaid Services is working on a proposal aimed at requiring health care organizations to share medical information with patients, Health Data Management reports.
More

The Electronic Frontier Foundation filed an amicus brief in support of an American Civil Liberties Union lawsuit that seeks to enforce privacy protections afforded under the federal Privacy Act on behalf of two plaintiffs who are alleged to have been wrongly surveilled by the Federal Bureau of Investigation.
More

Toledo City Council member Rob Ludeman suggested that the city test implanting GPS microchips in pretrial detainees, replacing ankle monitors, The Appeal reports.
More

A coalition of organizations, including the Association of National Advertisers, Chamber of Commerce, Internet Association, and the Motion Picture Association of America, has sent a letter to state lawmakers pushing for changes to the California Consumer Privacy Act of 2018, MediaPost reports.
More

The Wall Street Journal reports tech companies, including the industry coalition Information Technology Industry Council, are starting to work with lawmakers to help craft a U.S. federal privacy law.
More

ASIA-PACIFIC

Reuters reports on a draft cloud-computing policy proposal that would require data generated in India to be stored within its borders.
More

EUROPE

France’s data protection authority has created a guideline breaking down consent rules within the EU General Data Protection Regulation.
More

A French court sided with a consumer group in its case against Twitter over its terms and conditions, Phys.org reports. The group claimed Twitter’s terms and conditions had 256 clauses it believed violated users’ privacy.
More

Germany’s Higher Regional Court in Cologne has denied the Internet Corporation for Assigned Names and Numbers’ appeal for an injunction against domain name registrar EPAG, Out-Law.com reports.
More