In this week’s Global News Roundup, Australian Attorney-General Mark Dreyfus announced the restructuring of the Office of the Australian Information Commissioner. The European Commission set a 3 July deadline for gatekeepers to notify their core platform service. Indian citizens condemned a potential amendment to the Aadhaar Authentication. And, in the U.S., a bipartisan group of senators reintroduced the Children and Teens' Online Privacy Protection Act 2.0.

The Latest

The European Commission opened a public consultation for how independent audits should be conducted under the EU Digital Services Act.

European Data Protection Board Chair Andrea Jelinek joined Euractiv's "The Tech Brief" podcast to discuss her tenure and overseeing enforcement of the EU General Data Protection Regulation since its establishment.

Enforcement

Australia Attorney-General Mark Dreyfus announced the federal government will allocate resources to restructure the Office of the Australian Information Commissioner.

Deputy Privacy Commissioner of Canada Brent Homan wrote a blog explaining the positives of human-centric privacy enforcement "that seeks to understand and ultimately serve the best interests of individuals in the most effective and impactful way."

After the EU's Digital Markets Act took effect 2 May, the European Commission said potential online gatekeepers have until 3 July to notify their core platform services.

Norway's data protection authority, Datatilsynet, has prohibited Statistics Norway from collecting data on Norwegians' grocery purchases.

The California Privacy Protection Agency Board will hold its next public meeting 15 May. 

Asia-Pacific

Indian citizens condemned a move by the government to amend the Aadhaar Authentication for Good Governance Rules.

The Tasmania Law Reform Institute is seeking stakeholder input on potential reforms to the Personal Information Protection Act of 2004.

Europe

The Court of Justice of the European Union rendered a decision in a case regarding consumer rights to compensation with violations of the EU General Data Protection Regulation.

The Court of Justice of the European Union also ruled that a data subject's right to obtain a copy of their personal data means they must be given "a faithful and intelligible reproduction" of all data.

US

U.S. Sens. Bill Cassidy, R-La., and Ed Markey, D-Mass., reintroduced the Children and Teens' Online Privacy Protection Act 2.0, which they said updates online privacy protections for children and teens for the 21st century.

The Information Accountability Foundation wrote a blog outlining the unique requirements for data protection assessments under the Colorado Privacy Act.

Guidance

Ireland's Data Protection Commission announced fresh employer guidance on handling the data of current, former and prospective employees.

Spain’s data protection agency, the Agencia Española de Protección de Datos, created a guide for the use of "data spaces" and personal data protection laws.

ICYMI

A new chart in the IAPP Resource Center offers a look at the EU regulatory decision-making process and how laws get approved. 

The U.S. Federal Trade Commission alleged Facebook "repeatedly violated its privacy promises" and is proposing a "blanket prohibition" on parent company Meta's monetization of data of users under age 18, while the company called the move "a political stunt." IAPP Staff Writer Jennifer Bryant has details and the latest reaction to the FTC's proposal.

On the heels of Iowa, Indiana became the seventh U.S. state to pass a comprehensive privacy law. While Indiana differentiated itself by providing covered entities with more than two and a half years to come into compliance, IAPP Westin Research Fellow Anokhy Desai, CIPP/US, CIPM, CIPT, wrote there is substantial overlap between the Indiana Consumer Data Protection Act and three of the six state privacy laws.