The Article 29 Working Party has been busy putting out guidance for organizations working to implement the EU General Data Protection Regulation. Hong Kong may get new drone rules, Japan is making strides toward EU adequacy, and the EU Parliament proposed a new draft of the ePrivacy Regulation. The U.S. Congress has been busy as well, with bills to address the expiration of Section 702 of the Foreign Intelligence Surveillance Act, a bill to enhance artificial intelligence development and amendments to the Senate’s automated car legislation. Plus, the U.S. Federal Communications Commission nixed net neutrality, and says it will enter into a memorandum of understanding with the FTC to protect consumer’s online. Read about all this and more in this week’s Privacy Tracker legislative roundup.

LATEST NEWS

Drone Life reports that the Hong Kong Civil Aviation Department has proposed a drone registration program similar to that in the U.S.
More

Law360 reports that the U.S. House has passed the Privacy Notification Technical Clarification Act, loosening requirements for banks to notify customers of personal information policies.
More

The U.S. Senate has amended the AV START Act, addressing privacy and cybersecurity concerns with the development of highly automated vehicles, reports The National Law Review.
More

Florida state Sen. Jeff Brandes has filed a bill that would require law enforcement to get a warrant to access personal information from cell phones or microphone-enabled home devices, reports the Sunshine State News.
More

New York Governor Andrew Cuomo announced the New York Department of State will issue a new regulation protecting consumers from the potential harms after being the victim of a data breach, reports The National Law Review.
More

The Ohio House of Representatives is considering the Victims Privacy and Protection Act, which would keep photographs, videos and digital media that depict a victim at the time of the offense out of the public record, reports limaohio.com.
More

ICYMI

As the Estonian Presidency of the Council of the European Union wraps up this month, it put forward a new draft of the pending ePrivacy Regulation, which was considered at the Council's Working Party on Telecommunications and Information Society meetings. In this piece for Privacy Tracker, IAPP Content Director Sam Pfeifle identifies the key new proposals and contrasts them with the most recent draft from the EU Parliament. 
More

IAPP Westin Fellow Muge Fazlioglu, CIPP/US, has details on the Article 29 Working Party’s guidelines for transparency obligations under the EU General Data Protection Regulation for The Privacy Advisor.
More

IAPP Westin Fellow Lee Matheson, CIPP/US, briefly summarizes for The Privacy Advisor the Article 29 Working Party’s draft of its guidance on consent under the upcoming General Data Protection Regulation. 
More

In this Privacy Tracker post, IAPP Westin Fellow Lee Matheson, CIPP/US, offers a summary of the recently released update to the Article 29 Working Party's working paper on the transfer of personal data to third countries. 
More

On Dec. 13, the Dutch government introduced its GDPR Implementation Bill to the Parliament. Jeroen Terstegge, CIPP/E, CIPP/US, offers an overview of the bill in this Privacy Tracker post, noting that while there are few surprises, "some improvements are necessary."
More

US

The Federal Communications Commission voted Thursday 3-2 to pass the "Restoring Internet Freedom" order repealing Obama-era regulations that provided the agency with authority to police internet service providers, Nextgov reports
More

The Federal Communications Commission and the Federal Trade Commission announced they will enter a memorandum of understanding in order to protect online consumers, following the adoption of the Restoring Internet Freedom Order.
More

U.S. House and Senate lawmakers have introduced legislation designed to enhance artificial intelligence development, The Hill reports.
More

President Donald Trump has signed into law a defense spending bill that includes a provision to ban Kaspersky Lab products, Reuters reports.
More

Former Department of Homeland Security officials and cybersecurity professionals are supporting the DHS Cybersecurity & Infrastructure Security Agency Act, which recently passed through the House via voice vote, as a measure that will make it easier for companies to share cybersecurity information with the DHS, Bloomberg Law reports.
More

Congressional lawmakers are struggling to renew or reform Section 702 of the Foreign Intelligence Surveillance Act, which is set to expire Dec. 31, and may issue a short-term extension to allow the intelligence gathering provision to continue into 2018, The Hill reports.
More

This year’s $700 billion National Defense Authorization Act includes key cybersecurity provisions, CyberScoop reports. Among some of the provisions, the NDAA states the president will “develop a national policy for the United States relating to cyberspace, cybersecurity, and cyber warfare.” 
More

The New York City Council passed a bill aimed at addressing algorithmic bias by assuring greater transparency and understanding of how algorithms are used by the city's various agencies, according to an American Civil Liberties Union post.
More

A recent ruling from Suffolk Superior Court in Massachusetts makes certain police records publicly available, prohibiting law enforcement from withholding information on lists of people jailed, arrested police officers' mug shots, and police reports on public officials, The Boston Globe reports.
More

ASIA PACIFIC

EU Commissioner for Justice, Consumers and Gender Equality Věra Jourová and Japan Commissioner of the Personal Data Information Protection Commission Haruhi Kumazawa have issued a joint statement after holding a "constructive meeting in Tokyo ... to accelerate work towards achieving mutual adequacy findings as soon as possible in 2018," according to a European Commission press release.
More

EUROPE

The European Parliament has announced it has so far been unable to come to agreement with the Council in negotiations over the scope of new data processing rules for EU institutions, bodies and agencies.
More