In this week's Privacy Tracker global legislative roundup, the IAPP continued its retrospective coverage of the EU General Data Protection Regulation’s one-year anniversary. Belgium handed out its first fine for GDPR violations. Hong Kong and Singapore are collaborating on new data protection initiatives. Facebook had its settlement with the U.S. Federal Trade Commission delayed while it lost an appeal in Ireland’s Supreme Court. In the U.S., Maine is poised to pass the strictest internet service provider privacy law in the country, and separate artificial intelligence bans have been proposed in California and Michigan.
LATEST NEWS
China introduced new rules to solidify citizens’ rights to privacy and data protection. The draft regulation calls for new protections that will be up for debate while the rules are available for public comment until the end of June.
More
Hawaii has a proposed bill that would make it the first U.S. state to prohibit the sale of location data collected by smartphones without the explicit consent of users.
More
The 9th Circuit Court ruled that a Montana state law that keeps active ethics complaints confidential while the matter is decided violates the First Amendment regardless of whether the complaint involves elected or unelected officials.
More
A bill has been signed into law banning red-light traffic cameras in Texas. The ban will take effect across the state starting Sept. 1.
More
Journalists from Western Washington University’s school newspaper are filing a lawsuit against the university for withholding the names of students found responsible for sexual misconduct. The plaintiffs believe the school is violating Washington’s Public Record Act, which would require the disclosure of the information the newspaper seeks.
More
ICYMI
IAPP Associate Editor Ryan Chiavetta, CIPP/US, wrote for The Privacy Advisor on how privacy pros can take on Canada's new breach notification rules.
More
IAPP Senior Privacy Fellow Caitlin Fennessy, CIPP/US, got together with thought leaders from various backgrounds to discuss the hits and misses during the first year of the EU General Data Protection Regulation.
More
Speaking of the GDPR, The Privacy Advisor had an array of content related to the legislation’s one-year anniversary. IAPP Editor Angelique Carson, CIPP/US, had a conversation about the GDPR with Irish Data Protection Commissioner Helen Dixon and Hogan Lovells’ Eduardo Ustaran, CIPP/E, for The Privacy Advisor Podcast. Jennifer Baker and Ron De Jesus, CIPM, CIPP/C, CIPP/E, CIPP/US, CIPT, also wrote for The Privacy Advisor with a pair of one-year reviews of the GDPR.
IAPP Senior Westin Research Fellow Müge Fazlioglu, CIPP/E, CIPP/US, offered an update on the proposed ePrivacy Regulation and how it can line up with and stray from the GDPR in this post for Privacy Perspectives.
More
George Gooch, CIPP/US, penned a Privacy Tracker post on the Texas Legislature updating breach laws and creating a new privacy council.
More
APAC
Personal data regulators in Hong Kong and Singapore signed a memorandum of understanding in order to collaborate on various data protection efforts.
More
A survey found that 41 of 91 Japanese companies that are subject to the GDPR have yet to fully comply with the law.
More
The Philippine National Privacy Commission is planning to roll out a scheme for fines related to privacy law violations before the end of the year.
More
EUROPE
Belgium's data protection authority, Gegevensbeschermingsautoriteit, has announced its first fine for violations of the GDPR.
More
Cyprus Commissioner for the Protection of Personal Data Irene Loizidou announced her office will investigate the actions conducted by a Member of European Parliament candidate prior to the recent elections.
More
The General Court of the EU has set a date of July 1 and 2 to hear a legal challenge to the EU-U.S. Privacy Shield.
More
The Irish Supreme Court denied Facebook’s appeal of referral decision by an Irish High Court. According to Chief Justice Frank Clarke, the appeal could not be honored because of the High Court’s right to make a reference or against the terms of a reference.
More
US
The California State Assembly passed a bill that will require smart-speaker manufacturers to obtain consumer consent before a device saves any form of voice recording.
More
Georgia's Supreme Court ruled that the state government is not required to protect the personal information of its citizens.
More
The Maine House of Representatives voted to support a bill that would prohibit internet service providers from selling customers’ personal data without their consent.
More
Michigan's State Senate proposed a bill that would ban police from using facial-recognition technology.
More
The Oregon State Legislature passed amendments to its data breach notification rules.
More
The U.S. Federal Trade Commission delayed the settlement the agency hopes to reach with Facebook due to partisan differences. Meanwhile, a San Francisco federal judgeruled he will not dismiss lawsuits against Facebook over Cambridge Analytica.
Intel Associate General Counsel and Global Privacy Officer David Hoffman, CIPP/US, discussed his company publishing its third draft of recommendations for a U.S. privacy law.
More
A class-action federal lawsuit has been filed against Apple by customers who claim information from their iTunes purchases was sold to third parties.
More