In this week’s Privacy Tracker global legislative roundup, New Zealand’s proposed Privacy Bill passed through the House of Representatives. The Dubai International Financial Centre Data Protection Law No. 5 of 2020 was approved. Switzerland's canton of Zürich revised Information and Data Protection Act took effect. And in the U.S., California’s Office of the Attorney General submitted final regulations under the California Consumer Privacy Act to the state’s Office of Administrative Law. Finally, U.S. Senate lawmakers unveiled the Exposure Notification Privacy Act to regulate contact-tracing apps. 

LATEST NEWS

New Zealand’s proposed Privacy Bill, which would repeal and replace the Privacy Act 1993, passed through the House of Representatives and onto a third reading.
More

In Switzerland, the canton of Zürich’s revised Information and Data Protection Act took effect June 1, granting the data protection officer additional powers and duties and placing more duties on data processors. (Original post is in German.)
More

In the U.S., Gov. Andrew Cuomo, D-N.Y., and state legislators plan to repeal a police privacy law that seals personal data of police officers, firefighters and corrections officers, WBFO reports.
More

ICYMI

A white paper, written by representatives from Mexico’s National Institute for Transparency, Access to Information and Personal Data Protection, outlines the country’s definition of data portability and examines similarities and differences between the right in Mexican law and the EU General Data Protection Regulation.
More

California’s Office of the Attorney General submitted final regulations under the California Consumer Privacy Act to the state’s Office of Administrative Law and awaits approval to enforce the proposed regulations, IAPP Staff Writer Joe Duball reports in this piece for The Privacy Advisor.
More

ENFORCEMENT

During its 30th plenary session, the European Data Protection Board adopted a statement on data subject rights in connection to the COVID-19 pandemic.
More

The U.S. Federal Trade Commission announced app developer HyperBeard agreed to pay $150,000 and delete the information it collected on children under the age of 13 to settle alleged violations of the Children’s Online Privacy Protection Act Rule.
More

A privacy impact assessment by the U.S. Immigration and Customs Enforcement details its use of biometrics and the privacy implications involved, NextGov reports.
More

Finland’s data protection authority fined Taksi Helsinki Oy 72,000 euros for violating data protection legislation. (Original post is in Finnish.) 
More

MIDDLE EAST

United Arab Emirates Vice President and Prime Minister Mohammed bin Rashid Al Maktoum approved the Dubai International Financial Centre Data Protection Law No. 5 of 2020, enabling the financial hub to strengthen its leadership in enhancing data protection practices, the Khaleej Times reports.
More

US

U.S. Senate lawmakers led by Sen. Maria Cantwell, D-Wash., unveiled the Exposure Notification Privacy Act to regulate contact-tracing apps, The Washington Post reports.
More

Google is facing a $5 billion class-action lawsuit, filed in federal court in San Jose, California, over allegations of unlawful tracking of internet users, Reuters reports.
More

A federal judge in Illinois rejected Vimeo’s request to send a biometric privacy lawsuit to arbitration, MediaPost reports.
More

Aveanna Healthcare, based in Atlanta, Georgia, is facing a lawsuit following a data breach that affected more than 166,000 individuals, GovInfoSecurity reports.
More

Access Now filed a joint amicus brief with New America’s Open Technology Institute to the U.S. District Court for the District of Maine defending the state’s privacy law as plaintiffs seek to invalidate the legislation.
More