In this week’s Privacy Tracker global legislative roundup, EU Council members struck down an ePrivacy Regulation proposal from the Finnish Presidency. The IAPP Data Protection Congress in Brussels, Belgium, generated key perspectives from EU privacy officials. Togo became the most recent African country to take up a data protection law. And in the U.S., Senate Democrats opened up about their considerations for a federal privacy law, and state lawmakers in New York and Washington are reviving separate efforts to draft comprehensive state privacy legislation.

THE LATEST

In a blog post, the Norwegian data protection authority explained a recent decision by the Supreme Court of Norway regarding a parent's role in children's privacy.
More

The Togo National Assembly has adopted a data protection law, making Togo the 29th African country to pass privacy legislation.
More

A new decree published in Turkey’s Official Gazette will allow the country's data protection authority, the KVKK, to bring criminal complaints against hackers.
More

U.S. Rep. Val Demings, D-Fla., has introduced a bill to help law enforcement learn how to obtain electronic evidence, including data and online messages, during investigations. 
More

Gov. Tony Evers, D-Wis., has vetoed a bill regarding a Wisconsin school publishing the names of a student's parents within their data directories.
More

ICYMI

In a dispatch from Brussels for The Privacy Advisor, IAPP Editor Angelique Carson, CIPP/US, reported on the keynote address from European Commission Executive Vice President-Designate Margrethe Vestager, who touched on a range of privacy-related topics.
More

Leaders from key data protection authorities took the stage at the IAPP Data Protection Congress to discuss their EU General Data Protection Regulation enforcement actions. IAPP Editor Angelique Carson, CIPP/US, also had the details from Brussels, Belgium, for The Privacy Advisor.
More

For Privacy Tracker, Womble Bond Dickinson Associate Anna Rawlinson, CIPP/E, looks at the key takeaways from a decision by Poland's Personal Data Protection Office on personal data processing, which included a 660,000 euro fine.
More

In a post for Privacy Perspectives, Hunton Andrews Kurth's Centre for Information Policy Leadership Vice President and Senior Policy Counselor Markus Heyder and Global Privacy Policy Analyst Sam Grogan, CIPP/A, CIPP/E, CIPP/US, explained their group's discussion paper on accountability being a main component in U.S. Federal Trade Commission consent orders.
More

ENFORCEMENT

Information and Privacy Commissioner of Alberta, Canada, Jill Clayton has found the Calgary Remand Centre and Alberta Justice violated sections of the Freedom of Information and Protection of Privacy Act by improperly deleting records despite an inmate’s information request.
More

The U.S. Federal Trade Commission announced it has reached a settlement with Medable over allegations it falsely claimed participation in the EU-U.S. Privacy Shield agreement.
More

CANADA

A Saskatchewan woman has filed what her attorney believes to be the first civil lawsuit in the province under a new privacy law that allows victims to seek financial compensation from someone who shares images of them without consent.
More

EUROPE

The Permanent Representatives Committee of the Council of the European Union rejected the draft ePrivacy Regulation brought forth by the Finnish Presidency of the Council of the EU.
More

The European Data Protection Board released its opinion on the draft decision from the Belgian Supervisory Authority regarding ExxonMobil Corporation’s binding corporate rules.
More

The European Data Protection Board announced it opened a public consultation on its guidelines for data protection by design and default until Jan. 16.
More

US

Sens. Maria Cantwell, D-Wash., Dianne Feinstein, D-Calif., Sherrod Brown, D-Ohio, and Patty Murray, D-Wash., have unveiled principles for consideration and inclusion in a comprehensive federal privacy law.
More

Sen. Josh Hawley, R-Mo., proposed a new bill that would limit Americans’ data in countries presenting national security concerns — specifically, China and Russia. The National Security and Personal Data Act would prevent companies in those countries from transferring Americans’ data back within their borders and collecting data unnecessary to their business operation.
More

Advertiser coalition Privacy for America asked Congress to pass a federal privacy law.
More

The Credit Union National Association called for Congress to update data security laws to move beyond the Gramm-Leach-Bliley Act.
More

Facebook will turn over documents about its data practices after California's Office of the Attorney General asked the Superior Court of the County of San Francisco to order the tech company to do so earlier this month.
More

Facebook has asked the U.S. District Court of Northern California to dismiss a privacy lawsuit that claims it collects users’ IP addresses and estimates their locations even when users turn off location tracking.
More

The New Hampshire Supreme Court heard arguments in three cases that question when the public’s right to know overrules privacy concerns.
More

The Electronic Privacy Information Center announced its support behind the New York State Senate's efforts to pass Senate Bill 5642 on personal data oversight.
More

Washington state legislators will propose a new data privacy law next year. The revamped law will give citizens enhanced data rights, establish new transparency requirements for companies processing personal data, and provide new rules for facial-recognition technology.
More