In this week's Global News Roundup, outgoing European Data Protection Board Chair Andrea Jelinek reflected on her time overseeing enforcement of the EU General Data Protection Regulation. France's data protection authority levied an expanded penalty against Clearview AI for delayed compliance. The U.S. Federal Trade Commission is considering amending the Health Breach Notification Rule. And the Privacy Commissioner of Canada told members of Parliament that political parties should be subject to relevant privacy laws.

The Latest

The California Privacy Protection Agency published potential California Privacy Rights Act regulations it will consider during its 15 May board meeting.

Enforcement

The Office of the Australian Information Commissioner welcomed the increased funding in the upcoming 2023-2024 federal budget.

Quebec's data protection authority, the Commission d'accès à l'information du Quebec, appointed Rady Khuong vice president of its jurisdictional section and Naomi Ayotte as a member of its oversight section. 

European Data Protection Board Chair Andrea Jelinek joined Euractiv's "The Tech Brief" podcast to discuss her tenure and overseeing enforcement of the EU General Data Protection Regulation since its establishment. 

France's data protection authority, the Commission nationale de l'informatique et des libertés, announced Clearview AI is required to pay a 5.2 million euro penalty for delayed compliance with a prior order. 

The CNIL also selected Contentsquare, Hugging Face and Lifen to benefit from its "enhanced support" over the coming months. 

The Netherlands' data protection authority, Autoriteit Persoonsgegevens, fined Social Insurance Bank 150,000 euros for potentially enabling unauthorized access to personal details of pension recipients. 

The U.S. Federal Trade Commission's 18 May open meeting agenda features consideration of a policy statement on biometric data collection and a Notice of Proposed Rulemaking to amend the Health Breach Notification Rule.

Asia-Pacific 

The Australian Banking Association claimed potential reforms to the Privacy Act could have unintended consequences, such as "consent fatigue."

Canada

Privacy Commissioner of Canada Philippe Dufresne told the Senate of Canada's Standing Committee on Legal and Constitutional Affairs federal political parties should be subject to relevant privacy laws.

Europe

The European Commission opened a public consultation for how independent audits should be conducted under the EU Digital Services Act.

Members of European Parliament voted 306-27 with 231 abstentions to adopt a nonbinding opinion rejecting the proposed EU-U.S. Data Privacy Framework.

European Parliament's Committee on Civil Liberties, Justice and Home Affairs and Committee on Internal Market and Consumer Protection each approved the proposed Artificial Intelligence Act.

A new EU draft Cybersecurity Certification Scheme for Cloud Services will be reviewed by the European Cybersecurity Certification Group.

U.K. Information Commissioner John Edwards does not foresee a breach of the EU-U.K. adequacy agreement if U.K. Parliament passes the proposed Data Protection and Digital Information Bill.

US

U.S. Sen. Michael Bennet, D-Colo., introduced the Assuring Safe, Secure, Ethical, and Stable Systems for AI Act, which would establish a task force to oversee the federal government's use of AI. 

Members of the U.S. House Energy and Commerce Committee have participated in six data privacy hearings this year and will be considering updates to the American Data Privacy and Protection Act, which passed the committee last Congress.

Florida lawmakers passed Senate Bill 262, legislation that would give consumers access to information collected about them by companies and the right to have some data deleted.

Guidance

Spain's data protection authority, the Agencia Española de Protección de Datos, published a guide for cryptographic systems as a data protection security measure in partnership with the Spanish Association for the Promotion of Information Security and Spanish Professional Association for Privacy.

In a blog post, U.K. Information Commissioner's Office Deputy Commissioner for Regulatory Policy Emily Keaney addressed challenges law enforcement agencies face when using personal data during investigations.