In this week’s Global News Roundup, Taiwan’s Ministry of Transportation and Communications fined a rental car company following a data breach. A U.S. Federal Trade Commissioner was renominated for a new term. New compromise text of the EU Cyber Resilience Act was circulated in the EU Council of Ministers. And the U.K. Information Commissioner’s office published advice to help game developers comply with the Age-Appropriate Design Code.

The Latest

The First-Tier Tribunal overturned portions of a 2020 enforcement notice by the U.K. Information Commissioner's Office against Experian, confirming the company's reliance on legitimate interests as a legal basis for processing credit reference agency information for direct marketing purposes.

The European Commission announced its intention to propose legislation to better align national data protection authorities' EU General Data Protection Regulation enforcement approaches.

Enforcement

Taiwan’s Ministry of Transportation and Communications issued a 90,000 yuan fine to a car rental company that experienced a data breach. 

The German Federal Constitutional Court ruled the use of Palantir surveillance software by police in Hesse and Hamburg unconstitutional.

The Baden-Württemberg Commissioner for Data Protection and Freedom of Information released its data protection activity report for 2022.

The U.S. Federal Trade Commission announced the creation of the Office of Technology to be led by Chief Technology Officer Stephanie Nguyen.

U.S. President Joe Biden renominated U.S. Federal Trade Commissioner Rebecca Kelly Slaughter to a new term.

U.S. Federal Trade Commissioner Christine Wilson announced her resignation from the agency in an op-ed.

Europe

The Swedish presidency of the EU Council of Ministers shared new compromise text of the draft Cyber Resilience Act with changes to the categorization of "critical" and "highly critical" connected devices.

Proposed Artificial Intelligence Act co-rapporteurs Brando Benifei and Dragoș Tudorache circulated updated compromise texts of the legislation to fellow members of European Parliament.

US

The California Privacy Protection Agency sent its first set of proposed final California Privacy Rights Act regulations to the state's Office of Administrative Law.

A subcommittee of the Virginia House Committee on Courts of Justice halted a bill to protect women's menstrual tracking data from search warrants.

The Washington state Legislature will hold a public hearing on a bill to protect minors from being exploited in for-profit vlogs.

Guidance

The Nova Scotia Office of the Information and Privacy Commissioner published guidance for public agencies on limiting improper data access by their employees.

The U.K. Information Commissioner's Office published guidance aimed to assist children's online game developers and their U.K. Age-Appropriate Design Code compliance efforts.

ICYMI

The Australian Attorney-General's Department released its highly anticipated review of the Privacy Act, a significant step in the reform of the nation's privacy law. IAPP Editorial Director Jedidiah Bracy, CIPP, reports on the reforms and shares reaction from Salinger's Anna Johnston, CIPP/E, CIPM, FIP, and Privcore's Annelies Moens, CIPP/E, CIPT, FIP.

The European Parliament Committee on Civil Liberties, Justice and Home Affairs urged the European Commission to deny the U.S. adequacy status based on the proposed EU-U.S. Data Privacy Framework. IAPP Staff Writer Joe Duball reports on the key points stressed in the draft opinion.