In this week's global legislative roundup, European Parliament's Internal Market Committee voted 43-1 to approve the provisional agreement on the proposed Digital Markets Act. The U.K. Information Commissioner's office levied a 7.55 million GBP fine against Clearview AI for the use of U.K. citizen's facial images in its database. The U.S. Federal Trade Commission announced Alvaro Bedoya and voted to adopt a policy statement regarding increased scrutiny of Children's Online Privacy Protection Act violations involving education technology companies.

The latest

The U.K. Information Commissioner's Office announced a 7.55 million GBP fine against Clearview AI over the use of U.K. citizens' facial images in its global database. 
More

Enforcement

Brazil’s data protection authority, the Autoridade Nacional de Proteção de Dados, opened a call for comments on regulation of international transfers of personal data.
More

The Office of the Privacy Commissioner of Canada published a report that recounted the strategic privacy priorities over the last seven years.
More

The Legislative Assembly of Alberta’s Select Special Information and Privacy Commissioner Search Committee recommended Diane McLeod be appointed as the next provincial Information and Privacy Commissioner.
More

Italy's data protection authority, the Garante, fined ridesharing platform Uber 4.2 million euros for alleged data processing violations.
More

The Netherlands' data protection authority, Autoriteit Persoonsgegevens, fined the Ministry of Foreign Affairs 565,000 euros for processing approximately 530,000 visa applications per year over the last three years without sufficient personal data protections, a violation of the EU General Data Protection Regulation.
More

Spain's data protection authority, the Agencia Española de Protección de Datos, fined Google 10 million euros for EU General Data Protection Regulation violations.
More

The U.S. Federal Trade Commission announced Alvaro Bedoya was sworn in as commissioner with a term set to expire Sept. 25, 2026.
More

Appearing before the U.S. House of Representatives Subcommittee on Financial Services and General Government, FTC Chair Lina Khan spoke regarding the need to increase the commission's resources and staffing via new funding.
More

The FTC voted 5-0 to adopt a policy statement regarding increased scrutiny of the U.S. Children's Online Privacy Protection Act violations involving education technology companies.
More

Europe

European Data Protection Supervisor Wojciech Wiewiórowski published opinions on two proposals from EU institutions to modernize and harmonize standards around cybersecurity and infosecurity practices.
More

EDPS Wojciech Wiewiórowski also offered an opinion on data protection considerations associated with the United Nations’ proposed Comprehensive International Convention on Countering the Use of Information and Communications Technologies for Criminal Purposes.
More

European Parliament's Internal Market Committee voted 43-1 to approve the provisional agreement on the proposed Digital Markets Act between Parliament and the Council of the European Union.
More

The European Parliament voted to widen Europol’s powers to enable the police agency to collect and process data on individuals, including those not suspected of a crime, Computer Weekly reports.
More

U.S.

The proposed State and Local Government Cybersecurity Act now heads to U.S. President Joe Biden for his signature after passing the House, Nextgov reports.
More

The California Privacy Protection Agency published the agenda for its May 26 board meeting, including a range of updates related to California Privacy Rights Act rulemaking.
More

Privacy operations management

The Office of the Privacy Commissioner of Canada issued an interpretation of sensitive information under the Personal Information Protection and Electronic Documents Act.
More

In a blog post, Information and Privacy Commissioner of Ontario Patricia Kosseim outlined takeaways from an investigation into the sale of deidentified data by a health information custodian to a third party.
More

Singapore's Personal Data Protection Commission published a new guide on the responsible use of biometric data in security applications.
More

The U.K. Health and Security Agency released privacy guidance for the National Health Service’s COVID-19 mobile application.
More

The U.K. Information Commissioner’s Office created tools, templates and guidance to help online services assess whether they are considering the best interests of children in design and development as required by the U.K. Children’s Code.
More