In this week's Privacy Tracker global legislative roundup, the Federal Council in Switzerland approved an amendment to the Council of Europe Data Protection Convention that strengthens the rights of data subjects. In Russia, the lower house of the Federal Assembly has passed a bill that, if approved, would increase fines for violations of the country's data protection laws. In the U.S., California's Office of the Attorney General held a series of public hearings on the draft regulations for the California Consumer Privacy Act, and in a hearing Dec. 4, lawmakers revisited the topic of a federal privacy law but with a more nuanced focus this time around.
THE LATEST
In Switzerland, the Federal Council approved the amending protocol to the Council of Europe Data Protection Convention, which requires data processors to notify the supervisory authority of data breaches and strengthens the rights of data subjects. (Original article is in French.)
More
ICYMI
There has been no shortage of hearings on privacy this year as U.S. Congress tries to figure out its approach to protecting consumers in the digital age. IAPP Editor Angelique Carson, CIPP/US, was at the Senate Committee on Commerce, Science, and Transportation hearing Dec. 4 and has the details in this exclusive for The Privacy Advisor.
More
A pair of noteworthy proposals for a comprehensive federal data privacy law has emerged as the debate within U.S. Congress continues. IAPP Senior Westin Research Fellow Müge Fazlioglu, CIPP/E, CIPP/US, explores the similarities and differences between Consumer Online Privacy Rights Act and Consumer Data Privacy Act, as well as the gray areas where both laws are neither in lock-step, nor completely out of sync.
More
HCL Technologies Global Privacy Office Senior Manager Piotr Foitzik, CIPP/A, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, CIPT, FIP, looks at both the similarities and differences between how the EU General Data Protection Regulation and CCPA handle third parties in this piece for The Privacy Advisor.
More
ENFORCEMENT
The European Data Protection Supervisor released a report on its “actions and achievements” over its past five-year mandate.
More
The French data protection authority, the CNIL, has unveiled a register documenting treatment activities for data processing under the GDPR. (Original article is in French.)
More
The U.K. Information Commissioner’s Office has opened a consultation on its draft guidance on the right of access under the GDPR.
More
According to the European Data Protection Board, Rhineland-Palatinate's Commissioner for Data Protection and the Freedom of Information in Germany has fined a hospital 105,000 euros for violations of the GDPR.
More
The Irish Data Protection Commission has announced a public consultation regarding plans for its 2020-2025 regulatory strategy.
More
Singapore's Personal Data Protection Commission announced fines against five companies for violations of the Personal Data Protection Act.
More
The U.S. Federal Trade Commission has announced it reached four settlements with companies following allegations they falsely claimed participation in the EU-U.S. Privacy Shield framework.
More
ASIA-PACIFIC
The cabinet of Indian Prime Minister Narendra Modi has cleared draft data protection legislation for consideration in Parliament, Reuters reports.
More
CANADA
The federal government will place a priority on strengthening the country’s privacy laws according to Minister for Innovation, Science and Industry Navdeep Bains, The Globe and Mail reports.
More
EUROPE
The lower house of the Federal Assembly of Russia has passed a bill to increase fines for violations of the country's data protection law, according to Hunton Andrews Kurth’s Privacy & Information Security Law Blog.
More
US
California's Office of the Attorney General hosted a public hearing in San Francisco on the CCPA, Courthouse News Service reports.
More
Updates to Twitter’s global privacy policy will comply with the CCPA, Reuters reports.
More
