In this week's global legislative roundup, IAPP Legal Research Fellow Cathy Cosgrove analyzed the California Privacy Rights Act's definition of "business." China plans to clearly address biometric data in its draft Personal Information Protection Law. South Korea announced intentions to amend the Personal Information Protection Act 2011. And U.S. state attorneys general worked out a pair of data breach settlements.

LATEST NEWS

Peru's National Authority for the Protection of Personal Data published approval of methodology for calculating fines under Law No. 29,733 on the Protection of Personal Data.
More

South Korea's Personal Information Protection Commission announced its move to revise the Personal Information Protection Act 2011, including amendments on the right to request transmission of personal data collected, handling of certain pseudonymized data, and other definitions and clarifications.
More

Booking technology company Sabre reached a $2.4 million settlement with 27 U.S. state attorneys general over a 2011 data breach affecting 1.3 million credit card holders, CyberScoop reports.
More

ICYMI

In the second of a 10-part series examining the top operational impacts of the California Privacy Rights Act, IAPP Legal Research Fellow Cathy Cosgrove breaks down the definitions of "business" under both the California Consumer Privacy Act and the CPRA.
More

ENFORCEMENT

The U.S. Federal Trade Commission announced unanimous approval of a settlement with Nevada-based SkyMed International over a lack of safeguards that led to a data breach involving 130,000 membership records.
More

The Office of Connecticut Attorney General William Tong announced a $2 million settlement between seven state attorneys general and online retailer CafePress related to a 2019 data breach involving 22 million customers.
More

ASIA-PACIFIC

Legislative Affairs Commission Spokesman Yue Zhongming indicated China's Personal Information Protection Law will regulate biometric data and the use of facial recognition, the South China Morning Post reports.
More

US

The Washington Post Editorial Board called on the U.S. Congress to pass a federal privacy law.
More