Last week, a draft of the EU ePrivacy Act was leaked and the Article 29 Working Party released a number of GDPR guidance documents. A draft GDPR implementation bill in the Netherlands offers insight into how that government plans to handle the change. A proposed amendment to Australia’s Privacy Act would mean cybersecurity researchers would need to prove their innocence in re-identification cases. Indonesia has new amendments to its Law on Electronic Information and Transactions. In the U.S., an Illinois court approved a settlement in a biometric privacy case, Federal Communications Commission Chairman Tom Wheeler is stepping down, and take a look at intangible concrete harms after Spokeo v. Robins. Read about this and more in this week's Privacy Tracker legislative roundup.

LATEST NEWS

ADVERTISEMENT

Radarfirst- Looking for clarity and confidence in every decision? You found it.

De Brauw Blackstone Westbroek report on the Dutch draft Implementation Bill, offering insight into how the government will implement the EU General Data Protection Regulation.

An Illinois court approved a $1.5 million settlement for a violation of the Illinois Biometric Information Act, reports The National Law Review.

ICYMI

In something of a massive data dump, the EU’s Article 29 Working Party released a number of GDPR application guidance documents, including explanations for the mandatory DPO role, the mechanisms for data portability, how a “lead authority” to lead the one-stop shop enforcement mechanism will be established, and some notes on enforcement and the EU-U.S. Privacy Shield. IAPP Research Director Rita Heimes, CIPP/US and IAPP Publications Director Sam Pfeifle offer some of the highlights for Privacy Tracker. 

The first draft of the EU’s ePrivacy law reform has been leaked. The Privacy Advisor's Jennifer Baker spoke with MEP Jan Philipp Albrecht, GDPR rapporteur, about the draft to sort out the good, the bad, and the missing.

IAPP Westin Research Fellow Calli Schroeder, CIPM, CIPP/US, writes for Privacy Tracker about Spokeo v. Robins, shedding light on the notion of intangible concrete harm by examining how these cases have fared under the Supreme Court’s Spokeo standards.  

A recent court case in the Netherlands reinforced existing EU data protection obligations for companies not established in the EU. In this exclusive for Privacy Tracker, Privacy Management Partners' Jeroen Terstegge, CIPP/E, CIPP/US, and IAPP Westin Fellow Cobun Keegan, CIPM, CIPP/US, analyze the representative requirement. 

David Meyer writes for The Privacy Advisor that, according to one of the country's leading privacy associations, Germany's planned implementation of the EU General Data Protection Regulation is riddled with holes and illegalities.

US

The Department of Transportation has proposed a new set of rules requiring the auto industry to have technology allowing vehicles to share information with one another, according to Consumer Reports.

Federal Communications Commission Chairman Tom Wheeler will step down from the position on Jan. 20, The Hill reports.

ASIA PACIFIC

CANADA

CBC News reports on a group of MPs advocating for new legislation requiring federal agencies to properly protect personal data and be required to report breaches in a timely manner.

EUROPE

According to a leaked document published by EurActiv, the European Commission is floating a set of new data access and ownership rules that could affect manufacturers and companies that rely on consumer data.