In this week's Privacy Tracker global legislative roundup, the IAPP released its compilation of 2022 global legislative predictions. The U.S. government has concerns regarding potential hindrances caused by the EU's proposed Digital Markets Act. Federal lawmakers urge more consideration for a U.S. privacy law. The U.K. continues to plot its post-Brexit plans for data protection and artificial intelligence. And Norway becomes the latest country to rule against using Google Analytics.
THE LATEST
The board of directors for Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, approved a regulation to apply the General Data Protection Law to small processing agents.
More
France's Council of State, the Conseil d’État, confirmed the country's data protection authority, the Commission nationale de l'informatique et des libertés, had the power to fine Google 100 million euros for cookie violations instead of following the EU General Data Protection Regulation's one-stop-shop mechanism.
More
U.K. Prime Minister Boris Johnson announced the 'Brexit Freedoms’ Bill, which includes updated practices and standards around data protection and artificial intelligence.
More
According to Politico, the U.S. government circulated a paper to EU officials regarding potential changes to the Digital Markets Act that would lighten a perceived burden on U.S. companies.
More
In a post for European Law Blog, Georgetown University Law Center's Kenneth Propp, University Grenoble Alpes' Théodore Christakis and Alston & Bird's Peter Swire, CIPP/US, discussed potential statutory law changes the U.S. may need to make on consumer redress to address adequacy negotiations between the EU and the U.S.
More
Republican leaders of U.S. Senate and House committees wrote a letter to President Joe Biden urging his administration to work with Congress on passing consumer privacy and data security law in 2022.
More
Quebec's Commission on Access to Information issued a guidance note to businesses on their new obligations under Bill 64, which concerns the modernization of provincial privacy laws for the private sector.
More
ICYMI
The IAPP released a white paper highlighting 2022 global legislative predictions from privacy professionals in 43 countries. The IAPP Westin Research Center also launched its "Global Privacy Law and DPA Directory."
More
IAPP Staff Writer Joe Duball reported on three U.S. states along with Washington, D.C., filing lawsuits against Google for alleged use of dark patterns in its location data practices.
More
ENFORCEMENT
The Swedish privacy protection authority, Integritetsskyddsmyndigheten, issued a fine of SEK 1.9 million against the Uppsala Region for inadequate security measures in its personal data handling.
More
ASIA-PACIFIC
Japan's Ministry of Internal Affairs and Communications published updated guidance on data protection measures for telecommunications companies.
More
EUROPE
The European Data Protection Board published guidance on the data subjects' right of access under the EU General Data Protection Regulation.
More
The European Commission proposed fellow EU institutions join on a declaration of digital rights and principles, including commitments to privacy and data protection.
More
US
Consumer Reports and the Electronic Privacy Information Center published a white paper detailing steps the U.S. Federal Trade Commission should take on privacy rulemaking. The report suggests the FTC take steps toward a data minimization rule, bans on secondary data uses, data transparency obligations and nondiscrimination rules.
More
Accountable Tech submitted a petition calling on the U.S. Federal Trade Commission to initiate a rulemaking process to prohibit surveillance-based advertising.
More
A trio of privacy bills are before the Hawaii Legislature. Senate Bill 2428 and SB 2797 would each establish a framework with penalties for regulating controllers and processors that access consumers’ personal data and create a consumer privacy special fund. House Bill 2051 would establish the Hawaii Consumer Privacy Act, specifying consumers’ personal data rights and outlining obligations for businesses regarding collection, disclosure, sharing and selling of personal information.
State Sen. Mike Flood, R-Neb., proposed Legislature Bill 1188 which would enact the Uniform Law Commission's Uniform Personal Data Protection Act. Nebraska is the first state to introduce the ULC's framework, which was drafted with an eye toward universal adoption across states.
More
