In this week's Privacy Tracker global legislative roundup, Brazil moves forward with plans to push back enforcement of its new privacy law. Aubin de Perthuis, CIPP/E, and Joanna Tomaszewska wrote about EU General Data Protection Regulation fines being overturned in Belgium and Poland. Gal Omer, CIPP/E, CIPP/US, dissected draft regulations on utilizing Israeli health data for research purposes. And in the U.S., Facebook and Google were hit with class-action privacy suits, while Twitter settled one of its own.

LATEST NEWS

The Federal Senate of Brazil has passed a COVID-19 bill that includes provisions to delay enforcement of the General Data Protection Law until January 2021. IAPP Country Leader for Brazil Dirceu Santa Rosa has the details in Privacy Tracker. 
More 

Morocco's National Commission for the Control of the Protection of Personal Data has extended the country's facial-recognition moratorium to Dec. 31.
More

Google has been hit with a class-action suit in the U.S. District Court for the Northern District of California over alleged children's privacy violations related to biometric data, MediaPost reports.
More

According to Hunton Andrews Kurth's Privacy & Information Security Law Blog, Washington, D.C., has amended its data breach notification law.
More

ICYMI

In this piece for The Privacy Advisor, InnovaTech Legal Counsel Aubin de Perthuis, CIPP/E, breaks down why the Brussels Court of Appeal overruled one of the first decisions of the Belgian Data Protection Authority.
More

Amit, Pollak, Matalon & Co. Partner Gal Omer, CIPP/E, CIPP/US, provided a full breakdown of Israel's draft regulation regarding the use of personal health information for research purposes in this Privacy Tracker post.
More

For The Privacy Advisor, Spaczynski, Szczepaniak i Wspolnicy Partner Joanna Tomaszewska reports on the potential implications of the Polish Regional Administrative Court overturning the Polish data protection authority's first EU General Data Protection Regulation fine.
More

ENFORCEMENT

The U.S. Federal Trade Commission announced it reached a settlement with New Jersey–based Ortho-Clinical Diagnostics regarding the company's falsified EU-U.S. Privacy Shield participation.
More

ASIA-PACIFIC

The Australian Privacy Foundation does not support the pending Telecommunications Legislation Amendment (International Production Orders) Bill 2020, which is a precondition to the proposed agreement with the U.S. Clarifying Lawful Overseas Use of Data Act, ZDNet reports.
More

EUROPE

The European Commission announced a public consultation for its road map regarding the scope of its GDPR evaluation.
More

The Supreme Court of the United Kingdom ruled supermarket chain Morrisons is not liable for a 2014 data breach by an employee who leaked thousands of staff members’ personal details online, Bloomberg reports.
More

US

Marriott was hit with a class-action lawsuit in the U.S. District Court for the District of Maryland a day after revealing a data breach involving more than 5 million customers, Law.com reports.
More

In U.S. District Court papers, a group of plaintiffs argued Facebook’s collection, use and storage of location data is a “duplicitous” privacy violation, MediaPost reports.
More

Twitter’s monetization platform, MoPub, settled a class-action complaint in the U.S. District Court for the Northern District of California alleging the company violated children’s privacy through targeted advertising, MediaPost reports.
More

A class-action suit against convenience store chain Rutter's in U.S. Middle District Court is seeking $5 million in damages stemming from a data breach, PennLive.com reports.
More