In this week's global legislative roundup, Rui Bai Law Firm Head of Corporate Xiaobei Li analyzed China's Personal Information Protection Law's legal obligations on businesses in relation to the collection, processing, provision, transfer, deletion and destruction of personal data. The EDPB announced plans for coordinated enforcement among national data protection authorities on cloud services provided by the public sector. Oman's Ministry of Information announced the Law on the Protection of Personal Data was published. And in the U.S., a number of comprehensive state privacy laws were introduced and advanced through their respective legislatures. 

The Latest

The Irish Times reports Ireland's Data Protection Commission reached a preliminary decision to potentially suspend Facebook's data transfers between the EU and the U.S.
More

State Assemblymember Evan Low, D-Calif., introduced Senate Bill 1189 in the California State Senate. The bill would require companies that hold biometric information develop a written policy outlining a retention schedule and guidelines to destroy biometric information. If passed, the bill would go into effect Sept. 1 2023.
More

State Sen. Joseph Rafferty, D-Maine, introduced "An Act To Protect Consumers' Privacy by Giving Them Greater Control of Their Data and To Establish Consumer Protections Regarding Small Dollar Loans" Feb. 16. The bill was referred to the Innovation, Development, Economic Advancement and Business Committee. 
More

The Iowa House Information Technology Committee voted 15-0 to advance House Study Bill 574. The bill is now eligible to be voted on the House floor.
More

The Oklahoma House Technology Committee passed HB 2969, the Oklahoma Computer Data Privacy Act, on a 6-0 vote after an amendment replaced all of the language. The bill moves to the House floor for third reading and potential passage out of chamber.
More

State Sen. Kirk Cullimore, R-Utah, introduced the "Consumer Privacy Act" Feb. 17. The bill was referred to the Senate Revenue and Taxation Committee.
More

ICYMI

In the second of a series exploring the top 5 operational impacts of China's Personal Information Protection Law, Rui Bai Law Firm Head of Corporate Xiaobei Li analyzed the law's legal obligations on businesses in relation to the collection, processing, provision, transfer, deletion and destruction of personal data.
More

Enforcement

The European Data Protection Board announced its Feb. 22 plenary session will feature discussions on the updated guidelines for using codes of conduct as tools for data transfers.
More

The EDPB announced plans for coordinated enforcement among national data protection authorities on cloud services provided by the public sector.
More

Axios reports dating application Grindr will appeal its NOK 65 million fine from Norway's data protection authority, Datatilsynet, over EU General Data Protection Regulation violations.
More

Thailand’s Personal Data Protection Committee held its first meeting Feb. 10, according to the Ministry of the Digital Economy and Society.
More

Asia-Pacific

The Economic Times reports Indian officials are considering a complete re-draft of the Data Protection Bill 2019.
More

Europe

France's data protection authority, the Commission nationale de l'informatique et des libertés, published its 2022 to 2024 strategic plan.
More

The U.K. Information Commissioner’s Office is seeking feedback on the draft guidance for research provisions of the UK General Data Protection Regulation.
More

Middle East

Oman's Ministry of Information announced the Law on the Protection of Personal Data was published in the Official Gazette No. 1429.
More

US

U.S. Sens. Richard Blumenthal, D-Conn., and Marsha Blackburn, R-Tenn., introduced the Kids Online Safety Act, which offers enhanced online protections for minors age 16 and under.
More

State Assemblymembers Buffy Wicks, D-Calif., and Jordan Cunningham, R-Calif., proposed Assembly Bill 2273, the California Age-Appropriate Design Code Act, Politico reports.
More

Indiana Senate Bill 358 received favorable recommendation from the House Commerce, Small Business & Economic Development Committee on a 12-0 vote.
More

The Iowa House Information Technology Committee voted 15-0 to advance House Study Bill 674 to a full House vote.
More

The Virginia Senate voted to approve legislation that would give local police the ability to use facial recognition databases to identify a person involved in a “specific criminal incident, or a specific citizen welfare situation,” ABC 8 News Richmond reports.
More