The report is in on Canada’s Personal Information Protection and Electronic Documents Act, recommending modernizing and protections for online personal data. Mexico’s Lower House has passed a regulatory framework for cryptocurrencies. The European Commission is drafting legislation designed to mandate tech companies turn over personal data even if the information is not located in the Union. The U.K. government has asked to have until July 31 to bring the Investigatory Powers Act into compliance with EU law. And in the U.S., the Supreme Court heard arguments in the Microsoft case, the 9th Circuit Court of Appeals reversed its 2016 ruling that the Federal Trade Commission doesn’t have the authority to regulate AT&T, and Oregon’s data breach bill is headed to the governor. Read about all this and more in this week’s Privacy Tracker weekly roundup.

LATEST NEWS

Reuters reports Canada’s privacy commissioner is considering reforms to better protect personal data online, such as a right to be forgotten.
More

Mexico is set to approve new cryptocurrency regulations that would address the sharing of personal data among financial institutions, among other issues, ICO Examiner reports.
More

ADVERTISEMENT

PLI,  Earn privacy CPE and CLE credits: Watch anytime online or on our mobile app, topics include AI, privacy, cybersecurity, and data law

Georgia’s House and Senate both voted to pass a bill that would make credit freezes free, Politically Georgia reports.
More

Hawaii is considering a bill to make credit freezes free, Big Island Now reports.
More

A bipartisan bill in North Carolina aims to strengthen the state’s data breach law, Nixon Peabody reports.
More

Ohio Rep. Wes Retherford has proposed the Victim’s Protection and Privacy Act, which would prevent visual evidence related to sex crimes from becoming part of the public record, Journal News reports.
More

Oregon’s bill to put a 45-day notification deadline on breach notification is headed to the governor’s desk, The Associated Press reports.
More

ICYMI

Christin McMeley, CIPP/US, and John Seiver of Davis Wright Tremaine write an analysis of the CLOUD Act for Privacy Tracker, which aims to resolve the question of the Electronic Communications Privacy Act's extraterritorial reach.
More

The 9th U.S. Circuit Court of Appeals has reversed its 2016 ruling that the Federal Trade Commission did not have the authority to regulate AT&T because it was a “common carrier.” IAPP Content Director Sam Pfeifle has the story for Privacy Tracker.
More

The United States Supreme Court heard arguments in a case with major implications for the privacy profession: United States v. Microsoft. As IAPP Westin Fellow Lee Matheson, CIPP/E, CIPP/US, outlines for Privacy Tracker, the dispute has spanned several years and will determine whether the U.S. can compel Microsoft to turn over data stored on a server located outside of the United States via a warrant issued by a U.S. court under the Stored Communications Act.
More

US

The topic of the Stored Communications Act came up as U.S. Supreme Court justices heard arguments in the United States v. Microsoft case, Wired reports.
More

The U.S. Supreme Court justices offered their thoughts on the United States v. Microsoft case, Reuters reports.
More

ASIA-PACIFIC

Hogan Lovells’ Chronicle of Data Protection reports on a recent event hosted by Russia’s data protection authority, at which it highlighted enforcement activities and answered audience questions. 
More

Following Timothy Pilgrim’s retirement from the Office of the Australian Information Commissioner next month, the Australian government has confirmed that the current structure of devoting one individual to the dual appointment of information and privacy commissioner will continue, iTnews reports.
More

CANADA

The Canadian Press reports on the plan to create a federal cybersecurity center. The center will be created by the Communications Security Establishment and will help educate Canadian citizens on the country’s new cybersecurity strategy.
More

CBC News reports provisions within Finance Minister Bill Morneau’s latest budget would give the Canada Revenue Agency the ability to share taxpayer information with law enforcement agencies for crimes outside of tax evasion.
More

Northwest Territories Information and Privacy Commissioner Elaine Keenan Bengts is calling for reforms to the province’s Health Information Act, CBC News reports.
More

EUROPE

The European Commission is drafting legislation designed to mandate tech companies turn over personal data even if the information is not located in one of the 28 member states, Reuters reports.
More

The Royal Courts of Justice of the U.K. have been asked to give the government until July 31 to bring the Investigatory Powers Act in line with EU and human rights law, Computer Weekly reports.
More

To prepare for the upcoming EU General Data Protection Regulation, the States of Guernsey announced former U.K. Information Commissioner Richard Thomas will chair the new Guernsey Data Protection Authority.
More

Irish Data Protection Commissioner Helen Dixon has released the “2017 Annual Report of the DPC.” 

Germany’s Conference of Independent Federal and State Data Protection Authorities have released a pair of documents to help companies comply with Article 30 of the EU General Data Protection Regulation, JD Supra reports.
More