In this week's global legislative roundup, leaders of the European Commission, the Council of the European Union and European Parliament signed a declaration on EU digital rights and principles. The Office of the Privacy Commissioner of New Zealand completed its investigation into a ransomware attack on information technology provider Mercury IT. And, in the U.S., the Federal Trade Commission announced Epic Games agreed to a $520 million settlement over alleged Children's Online Privacy Protection Act violations.
The Latest
The amendments to the California Privacy Rights Act and the Virginia Consumer Data Protection Act went into effect Jan. 1.
More
Enforcement
Belarussian National Center for Personal Data Protection Director Andrei Gayev signed an order implementing additional rules for the cross-border transfer of personal data.
More
The French data protection authority, Commission nationale de l'informatique et des libertés, fined Microsoft Ireland Operations Limited 60 million euros for failure to allow consumers to easily refuse cookies.
More
The CNIL issued a reminder that new standard contractual clauses went into effect for data transfers outside the EU as of Dec. 27, 2022.
More
The Irish Data Protection Commission launched a probe into reports that datasets containing the information of approximately 5.4 million Twitter users have been revealed on the internet.
More
The Office of the Privacy Commissioner of New Zealand completed its investigation into a ransomware attack of IT provider Mercury IT and warned the public the data is protected by a court order, Scoop reports.
More
The U.K. Information Commissioner’s Office took an “unusual step” and quietly published information on data breach investigations on its website, InfoSecurity Magazine reports.
More
The U.S. Federal Trade Commission announced Epic Games agreed to a $520 million settlement over alleged Children's Online Privacy Protection Act violations.
More
Bloomberg reports the FTC is intensifying its probe of Twitter's alleged privacy and data security issues since Elon Musk took over the company.
More
The Wall Street Journal reports the U.S. Federal Communications Commissioners stalemate is preventing location privacy fines against noted telecommunications providers from being issued.
More
Asia-Pacific
Australia Attorney General Mark Dreyfus received the results of a government review of the Privacy Act, launched in December 2019, and is expected to release a response in the first half of 2023, InnovationAus.com reports.
More
India's Ministry of Electronics and Information Technology extended the public consultation period on the draft Digital Personal Data Protection Act, 2022 to Jan. 2, 2023.
More
Europe
Leaders of the European Commission, the Council of the European Union and European Parliament signed a declaration on EU digital rights and principles, highlighting "the EU's commitment to a secure, safe and sustainable digital transformation."
More
European Union Ombudsman Emily O'Reilly determined the European Commission's monitoring of the Irish Data Protection Commission's handling of "big tech" cases through bimonthly overviews is "appropriate," RTÉ reports.
More
In a letter to parliament, the Netherlands' Minister for Digitalisation Alexandra van Huffelen said the Dutch data protection authority, Autoriteit Persoonsgegevens, will strengthen supervision of algorithms that process personal data.
More
U.S.
The Colorado attorney general's office published updated draft Colorado Privacy Act rules.
More
CNBC reports Meta's Facebook reached a $725 million settlement, pending court approval, over a class-action privacy lawsuit related to 2018 Cambridge Analytica claims.
More
Guidance
The Brazilian National Data Protection Authority's General Inspection Coordination published new guidance for reporting security incidents by data controllers to the authority.
More
ICYMI
The anticipated finalization of California Privacy Rights Act regulations has been pushed back again. IAPP Staff Writer Jennifer Bryant has the details from the CPPA’s Dec. 16 board meeting.
More
