In this week's Privacy Tracker global legislative roundup, Brazil moves forward with plans to push back enforcement of its new privacy law. Aubin de Perthuis, CIPP/E, and Joanna Tomaszewska wrote about EU General Data Protection Regulation fines being overturned in Belgium and Poland. Gal Omer, CIPP/E, CIPP/US, dissected draft regulations on utilizing Israeli health data for research purposes. And in the U.S., Facebook and Google were hit with class-action privacy suits, while Twitter settled one of its own.
LATEST NEWS
The Federal Senate of Brazil has passed a COVID-19 bill that includes provisions to delay enforcement of the General Data Protection Law until January 2021. IAPP Country Leader for Brazil Dirceu Santa Rosa has the details in Privacy Tracker.
More
Morocco's National Commission for the Control of the Protection of Personal Data has extended the country's facial-recognition moratorium to Dec. 31.
More
Google has been hit with a class-action suit in the U.S. District Court for the Northern District of California over alleged children's privacy violations related to biometric data, MediaPost reports.
More
According to Hunton Andrews Kurth's Privacy & Information Security Law Blog, Washington, D.C., has amended its data breach notification law.
More
ICYMI
In this piece for The Privacy Advisor, InnovaTech Legal Counsel Aubin de Perthuis, CIPP/E, breaks down why the Brussels Court of Appeal overruled one of the first decisions of the Belgian Data Protection Authority.
More
Amit, Pollak, Matalon & Co. Partner Gal Omer, CIPP/E, CIPP/US, provided a full breakdown of Israel's draft regulation regarding the use of personal health information for research purposes in this Privacy Tracker post.
More
For The Privacy Advisor, Spaczynski, Szczepaniak i Wspolnicy Partner Joanna Tomaszewska reports on the potential implications of the Polish Regional Administrative Court overturning the Polish data protection authority's first EU General Data Protection Regulation fine.
More
ENFORCEMENT
The U.S. Federal Trade Commission announced it reached a settlement with New Jersey–based Ortho-Clinical Diagnostics regarding the company's falsified EU-U.S. Privacy Shield participation.
More
ASIA-PACIFIC
The Australian Privacy Foundation does not support the pending Telecommunications Legislation Amendment (International Production Orders) Bill 2020, which is a precondition to the proposed agreement with the U.S. Clarifying Lawful Overseas Use of Data Act, ZDNet reports.
More
EUROPE
The European Commission announced a public consultation for its road map regarding the scope of its GDPR evaluation.
More
The Supreme Court of the United Kingdom ruled supermarket chain Morrisons is not liable for a 2014 data breach by an employee who leaked thousands of staff members’ personal details online, Bloomberg reports.
More
US
Marriott was hit with a class-action lawsuit in the U.S. District Court for the District of Maryland a day after revealing a data breach involving more than 5 million customers, Law.com reports.
More
In U.S. District Court papers, a group of plaintiffs argued Facebook’s collection, use and storage of location data is a “duplicitous” privacy violation, MediaPost reports.
More
Twitter’s monetization platform, MoPub, settled a class-action complaint in the U.S. District Court for the Northern District of California alleging the company violated children’s privacy through targeted advertising, MediaPost reports.
More
A class-action suit against convenience store chain Rutter's in U.S. Middle District Court is seeking $5 million in damages stemming from a data breach, PennLive.com reports.
More