In this week’s global legislative roundup, India's Ministry of Electronics and Information Technology introduced the Digital Personal Data Protection Act, 2022. Italy’s data protection authority, the Garante, prohibited the general use of facial recognition systems utilizing biometric data until a new law is passed, or the end of 2023. The EU Digital Services Act entered into force Nov. 16. And in the U.S., Sens. Maria Cantwell, D-Wash., and Ted Cruz, R-Texas, backed the Informing Consumers About Smart Devices Act.
The latest
The U.K. Information Commissioner's Office announced new guidance and resources for data transfer risk assessments.
More
Enforcement
European Data Protection Supervisor Wojciech Wiewiórowski welcomed proposed regulation, including security and data minimization principles, in EU-wide cybersecurity requirements.
More
During its November plenary, the European Data Protection Board adopted recommendations on the application for approving controller binding corporate rules.
More
France’s data protection authority, the Commission nationale de l'informatique et des libertés, fined software developer Discord 800,000 euros for failing to comply with EU General Data Protection Regulation requirements on data retention periods and personal data security.
More
In response to "numerous complaints," France’s DPA, the CNIL, recommended adopting a law concerning the collection and use of health data by health insurance organizations.
More
Twitter may not be fulfilling requirements to claim Ireland as its main establishment under the EU GDPR, TechCrunch reports.
More
Italy’s DPA, the Garante, prohibited the general use of facial recognition systems utilizing biometric data until a new law is passed or the end of 2023, Reuters reports.
More
The Garante also announced an investigation into the legality of some online newspapers that condition user access to agreeing to web tracking or payment.
More
Asia-Pacific
India's Ministry of Electronics and Information Technology proposed new privacy legislation, the Digital Personal Data Protection Act, 2022.
More
The Indian government’s impending data protection legislation is expected to allow the transfer of data and storage in approved locations, the Economic Times of India reports.
More
Canada
The Office of the Privacy Commissioner of Canada announced the completion of 11 research and public awareness projects focused on "protecting privacy in an increasingly digitalized world."
More
The Yukon Information and Privacy Commissioner ordered the territory’s Department of Education to “immediately” halt use of video surveillance to collect personal information on students, CBC reports.
More
Europe
The Dutch DPA, Autoriteit Persoonsgegevens, said a plan to store government data in commercial cloud services comes with major privacy risks.
More
The European Union Digital Services Act, establishing new obligations for online platforms to reduce harms online and introducing stronger user protections, entered into force Nov. 16.
More
Members of the European Parliament and EU Council discussed the ePrivacy Regulation recently, Euractiv reports.
More
Middle East
The Saudi Authority for Data and Artificial Intelligence asked for public opinion on the proposed amendments to the Personal Data Protection Law.
More
U.S.
The U.S. Federal Trade Commission extended its deadline for financial institutions to enhance their security safeguards for customers’ personal information.
More
Seven U.S. senators have called for investigations into "any breach" of Twitter's 2011 consent decree with the U.S. Federal Trade Commission "or other violations of our consumer protection laws."
More
U.S. Sens. Maria Cantwell, D-Wash., and Ted Cruz, R-Texas, support the Informing Consumers About Smart Devices Act, requiring developers of the devices to disclose microphones or cameras within products prior to purchase, PoliticoPRO reports.
More
Guidance
Belgium's DPA recently established its core enforcement priorities for 2023.
More
