In this week’s Privacy Tracker global legislative roundup, the European Parliament held discussions on the EU's third annual Privacy Shield review, and the U.K. Information Commissioner's Office dished out a 500,000 GBP data breach fine. A South Korean privacy officer was charged with negligence and fined for his role in a data breach. In the U.S., Facebook's $5 billion settlement with the Federal Trade Commission remains under a District Court review, California drew up an advisory to highlight California Consumer Protection Act rights, and state lawmakers in Washington and New Mexico are considering comprehensive privacy legislation.

THE LATEST

ITWeb reports on details of South Africa's Protection of Personal Information Act and the added responsibility and accountability the law will place on CEOs.
More

U.S. Reps. Doug Collins, R-Ga., and Hakeem Jeffreies, D-N.Y., have proposed a bill to protect the privacy of emails between federal inmates and their lawyers, The Epoch Times reports.
More

The U.S. Supreme Court is preparing to render a decision as to whether to review a California law that forces nonprofits to disclose donors to the state attorney general, the Washington Times reports.
More

House Speaker-designate Chris Sprowls, R-Fla., has introduced legislation to limit insurance companies from using genetic information with an eye toward improving consumer protection, the Herald-Tribune reports.
More

The Surveillance Technology Oversight Project has sued New York's Metropolitan Transportation Authority for alleged use of facial-recognition technology at a busy Manhattan subway station, the New York Daily News reports.
More

Washington's State Senate and House of Representatives have announced intentions to introduce bills on data privacy and facial recognition.
More

ICYMI

Jennifer Baker wrote for The Privacy Advisor on heated debate and discussions that were had during the third annual Privacy Shield review at the European Parliament. Among the topics was if California could have its own arrangement with the EU under the data-transfer agreement.
More

DLA Piper's Andrew Dyson, Anne-Gabrielle Haie and Patrick Van Eecke wrote for Privacy Tracker with analysis of the top-five key takeaways for businesses from the Court of Justice of the European Union advocate general's "Schrems 2.0" opinion and when they expect the court's decision.
More

For The Privacy Advisor, CBRE South Asia Private Limited Associate Director of Legal Sandeep Sangwan, CIPP/A, broke down a future conflict that could potentially materialize for those complying with India's new privacy bill and the EU General Data Protection Regulation.
More

ENFORCEMENT

Iceland's data protection authority, Persónuvernd, has ruled against telecommunications company Síminn in an investigation related to data subject access requests.
More

The U.K. Information Commissioner's Office fined DSG Retail 500,000 GBP for a data breach.
More

The U.S. Federal Trade Commission has announced it has agreed to a $120,000 settlement with California-based Mortgage Solutions FCS over personal-data-related violations of the Fair Credit Reporting Act.
More

The U.S. Federal Trade Commission announced it finalized its settlement with California-based Medable over false claims of EU-U.S. Privacy Shield participation.
More

The U.S. Federal Trade Commission has announced the finalization of its settlement with Utah-based InfoTrax Systems and former CEO Mark Rawlins.
More

ASIA-PACIFIC

In a post for Reed Smith's Technology Law Dispatch blog, Counsel Charmian Aw, CIPP/A, CIPP/E, CIPP/US, CIPM, FIP, examines the details of Singapore's amended mandatory data breach notification law.
More

According to Hunton Andrews Kurth's Privacy and Information Security Law Blog, the Seoul Eastern District Court has ruled a South Korean privacy officer was negligent in preventing a 2017 data breach and fined the officer 10 million won.
More

CANADA

Privacy Commissioner of Canada Daniel Therrien said the Border Services Agency violated federal law in overly invasive searches of cellphones, tablets and laptop computers, the Times Colonist reports.
More

EUROPE

The European Data Protection Board outlined feedback it has heard from stakeholders as it develops guidance on data subject rights under the EU General Data Protection Regulation.
More

European Data Protection Supervisor Wojciech Wiewiorówski released a preliminary opinion on data protection in relation to scientific research.
More

The U.S. White House has advised the European Union to avoid heavily regulating artificial intelligence until risk assessments and cost-benefit analyses have been carried out, Euractiv reports.
More

Regulators in the U.S. and the European Union will likely ramp up enforcement of children's privacy laws in 2020, Bloomberg Law reports.
More

TRACKING FEDERAL US PRIVACY LAW

U.S. Federal Trade Commission Chairman Joseph Simons opened up about his support for federal privacy legislation, including his desire for the FTC to retain its enforcement powers under any law, Multichannel News reports.
More

U.S. Chamber of Commerce CEO Tom Donohue urged Congress to end legislative gridlock and pass privacy legislation, the Los Angeles Times reports.
More

US

A pair of members of the U.S. House of Representatives plans to introduce a bill to amend the Children's Online Privacy Protection Act, Axios reports.
More

California Attorney General Xavier Becerra issued an advisory to highlight consumers’ data rights under the California Consumer Privacy Act.
More

U.S. District Court for the District of Columbia Judge Timothy Kelly has set a Jan. 24 deadline for Facebook and the government to respond to privacy groups criticizing Facebook's proposed $5 billion settlement with the Federal Trade Commission, The Wall Street Journal reports.
More

The New Hampshire Senate has rejected a bill that would prohibit companies from using biometric information for reasons beyond customers’ reasonable expectations, according to U.S. News & World Report.
More

After the New Mexico Legislature killed a bill last year that would have replicated the California Consumer Privacy Act, Sen. Michael Padilla, D-N.M., said he is working to revise the bill and intends to reintroduce it in 2021 or 2022, Adweek reports.
More

Attorneys for Upturn have filed a lawsuit against the New York City Police Department in New York State Supreme Court arguing that New Yorkers "have a right to know how police are searching their cell phones," Public News Service reports.
More

Vermont's data broker legislation, which has prompted 143 organizations to register on a broker registry, is performing well from the perspective of the Office of the Vermont Attorney General, Adweek reports.
More