Global News Roundup — August 7–21, 2017

In this week’s Privacy Tracker global legislative roundup, read about a new Chilean law requiring telecommunications operators to retain consumer data for two years. Russia has made additions to its list of countries that provide sufficient privacy protections to allow transfers of personal data from the nation, and its data protection authority issued guidelines for data operators on drafting privacy policies to comply with the 2006 privacy law. In the U.S., two 9th Circuit rulings address harm in privacy cases, Delaware has updated its breach law, New York has a new backyard surveillance law and increased protections on student records, California has a new law protecting the privacy of domestic violence victims, and NIST released a draft revision of its Special Publication 800-53. 

LATEST NEWS

An amendment to Chile’s existing law requires telecommunications operators to retain consumer data for two years, Telecompaper reports.
More

Lexology reports that Israel’s ILITA made two significant announcements recently: First, it released Directive 2/2017 on privacy law provisions that address direct mail, and second, it announced the revocation of fees for database registration.
More

Russia’s privacy regulator, Roskomnadzor, has added more countries to the list of those that provide sufficient privacy protections to allow transfers of personal data from Russia, Lexology reports.
More

DLA Piper reports on five significant changes proposed to Singapore’s data protection law.
More

Lexology reports on the U.K. government’s statement of intent that outlines its proposals for a new data protection bill.
More

The National Journal reports on the spate of state privacy bills that arose from the rollback of U.S. Federal Communications Commission privacy rules and which are ones are poised to move forward.
More

California Gov. Jerry Brown signed legislation aimed at protecting the privacy and safety of domestic violence survivors, the Daily Bruin reports.
More

Delaware has updated its data breach law to include the protection of additional types of information and increase notification requirements, among other changes, JDSupra reports.
More

Nebraska Sen. Carol Blood has proposed a bill to create a drone policy in the state addressing privacy concerns, among others, the Omaha World-Herald reports.
More

New York Gov. Andrew Cuomo signed legislation prohibiting the unlawful alteration of official student records in any primary, intermediate, high school or college in the state — expanding on the types of information covered in the previous law.
More

US

The U.S. 9th Circuit Court’s ruling in Robins v. Spokeo found that a Fair Credit Reporting Act violation was sufficient to justify Article III standing. Lexology reports on what this may mean going forward.
More

Ars Technica reports on the draft Senate Republican border security bill, Building America’s Trust Act, which would increase the collection of biometric data, the use of drone monitoring and, in some cases, see mandatory DNA collection. The author and co-sponsors of the bill have yet to officially introduce the bill.
More

In a column for AdExchanger, Davis & Gilbert Partner Richard Eisert discusses U.S. District Judge Edward Davila’s ruling that the onus falls on the individual user to keep browsing history private rather than on a company to set privacy as a default.
More

The 9th U.S. Circuit Court of Appeals recently ruled that concern about potential privacy intrusion does not qualify as an imminent injury that can be addressed in court, AMA Wire reports.
More

The National Institute of Standards and Technology has issued a draft revision of its Special Publication 800-53, Security and Privacy Controls for Information Systems and Organizations.
More

New York Gov. Andrew Cuomo signed new legislation that will make it possible to sue a neighbor for the invasion of privacy if they videotape in an adjacent backyard without permission, the Times-Union reports.
More

The Tennessean reports the first challenge is underway to a new Tennessee law requiring public schools to share student information with charter schools within 30 days of a request.
More

ASIA-PACIFIC

The Russian data protection authority, Roskomnadzor, issued guidelines for data operators on drafting privacy policies to comply with Russia’s 2006 privacy law, Hogan Lovells’ Chronicle of Data Protection reports.
More

A pair of information technology companies received the first enforcement actions for violations of China’s Cybersecurity Law, Hunton & Williams Privacy & Information Security Law Blog reports.
More

EUROPE

Ireland’s Data Protection Commissioner has released guidance on the appropriate qualifications for a data protection officer.
More