In this week's Privacy Tracker global legislative roundup, Luxembourg's data protection authority issued a record-setting EU General Data Protection Regulation fine. A German court broadened the scope of data subject access requests under the GDPR. Efforts to pass privacy legislation are picking up steam in China and India. And U.S. lawmakers presented their latest proposals for comprehensive federal privacy legislation and an updated children's privacy law.
THE LATEST
Brazil's DPA, the Autoridade Nacional de Proteção de Dados, released an FAQ document outlining its fines and penalties scheme under the General Data Protection Law.
More
Reuters reports Zoom will pay $85 million and upgrade its security practices as part of a preliminary class-action settlement over privacy claims filed to the U.S. District Court for the Northern District of California.
More
ENFORCEMENT
The Office of the Australian Information Commissioner released a report on its investigation of Uber's 2016 data breach that affected 57 million individuals, BankInfoSecurity reports. The OAIC will not issue a fine because the 1.2 million Australians affected did not file complaints. However, Uber will be required to create and maintain an information security program and appoint a coordinator to lead the initiative.
More
During its latest plenary session, the European Data Protection Board adopted a dispute resolution decision in the Irish Data Protection Commission's case against WhatsApp Ireland.
More
France's DPA, the Commission nationale de l'informatique et des libertés, issued a 400,000 euro fine to U.S.-based biotechnology firm Monsanto Company for violating an individual's right to know under the EU General Data Protection Regulation.
More
Luxembourg's National Commission for Data Protection issued an $888 million fine against Amazon for alleged violations of the GDPR, Bloomberg reports. Amazon disclosed the fine in a filing with the U.S. Securities and Exchange Commission.
More
Spain's DPA, the Agencia Española de Protección de Datos, fined Spanish supermarket chain Mercadona 2.5 million euros for violations of the GDPR.
More
AFRICA
Techzim reports Zimbabwe's Cybersecurity and Data Protection Bill is headed for presidential approval after passing the Senate of Zimbabwe.
More
ASIA-PACIFIC
According to Xinhua News Agency, China's Personal Information Protection Law will be read a third and final time during the National People's Congress of China's 30th meeting Aug. 17 to 20. If the law is read without further objection, the PIPL will be enacted following the reading.
More
The Supreme People's Court of China ruled to prohibit businesses from making facial recognition verification mandatory for mobile application services, The Washington Post reports.
More
The Hong Kong legislature commenced talks on privacy laws to address "doxing behavior," Reuters reports.
More
The Joint Committee of Parliament was granted a fifth extension to submit its report on India's Personal Data Protection Bill 2019, Mint reports. The committee is expected to submit the report during the first week of the Winter Session, which takes place during the last week of November.
More
Reuters reports on the privacy concerns surrounding a proposed biometric law in India. The DNA Technology Regulation Bill allows for the storing of DNA information in national and regional data banks, which can be tapped for criminal investigations and missing persons cases.
More
CANADA
The government of Alberta, Canada, is soliciting public feedback regarding the improvement of privacy protections across the province. The government is taking input via survey on a range of topics covered under the province's Personal Information Protection Act and the Freedom of Information and Protection of Privacy Act.
More
EUROPE
According to Norton Rose Fulbright's Data Protection Report, Germany's Federal Court of Justice offered a ruling that widens the scope of data subject access requests under Article 15 of the GDPR.
More
US
U.S. Sens. Roger Wicker, R-Miss., and Marsha Blackburn, R-Tenn., unveiled more details regarding the proposed Setting an American Framework to Ensure Data Access, Transparency, and Accountability Act.
More
USA Today reports U.S. Rep. Kathy Castor, D-Fla., reintroduced her Protecting the Information of our Vulnerable Children and Youth Act.
More
The New York City Council approved a bill requiring online food delivery services to share customers' data with establishments where they have placed an order.
More
