In this week’s global news roundup, the Czech Presidency of the Council of the European Union  approved the NIS2 Directive. The Irish Data Protection Commission fined Meta 265 million euros for alleged EU General Data Protection Regulation violations. And, PwC Senior Associate Ravin Nandle, CIPT, broke down India's proposed Digital Personal Data Protection Bill 2022 for the Privacy Tracker.

The Latest

Indian Minister for Railways, Communications and Electronics & Information Technology Ashwini Vaishnaw is targeting July or August 2023 for passage of the proposed Digital Personal Data Protection Bill, the Indian Express reports.
More

In its Annual Report, Belgium's Data Protection Authority called 2021 a record year, with requests for advice rising 87% and complaints up 181% over 2020.
More

The Czech Presidency of the Council of the European Union approved the NIS2 Directive, a modernized framework based on the EU Network and Information Security Directive.
More

The Irish Data Protection Commission announced a 265 million euro fine to Meta over alleged EU GDPR violations.
More

The U.K. Information Commissioner's Office announced biometrics is a key area of focus for its Regulatory Sandbox.
More

The U.S. Federal Trade Commission responded to a motion to dismiss the claims to a federal court against data broker Kochava over alleged unfair and deceptive location data sales, MediaPost reports.
More

Enforcement

An investigation by Hong Kong's Office of the Privacy Commissioner for Personal Data found EC Healthcare failed to obtain consent from clients before transferring their personal data to two brands within its group.
More

Sri Lankan President Ranil Wickremesinghe said establishing a data protection authority is one of three focal points within the country's 2023 budget, ReadMe reports.
More

In a unanimous decision, the U.S. Federal Communications Commission said callers must obtain consent prior to delivering "ringless voicemails."
More

The U.S. Federal Trade Commission's extended public consultation toward its Advance Notice of Proposed Rulemaking on commercial surveillance and lax data security closed Nov. 21.
More

Europe

The European Commission proposed the Interoperable Europe Act, aimed at streamlining public-sector data sharing across EU member states. 
More

European Parliament rapporteurs for the proposed Artificial Intelligence Act circulated a fresh compromise text focused on overhauling parts of the bill's enforcement framework, Euractiv reports. 
More

The Czech Presidency of the Council of the European Union released new text on the proposed Cyber Resilience Act, legislation intended to enact cybersecurity requirements for connected devices and related services, Euractiv reports.
More

The U.K. Department for Digital, Culture, Media and Sport announced the finalization of the country's adequacy decision with South Korea. 
More

Guidance

A review of the artificial intelligence regulatory landscape in the Australian state of New South Wales identified governance, particularly related to privacy rights, as an area for improvement, InnovationAus reports.
More

Germany’s Baden-Württemberg State Commissioner for Data Protection and Freedom of Information released a code of conduct for processors, offering standardized rules to support companies in applying the EU General Data Protection Regulation. 
More

The U.K. Information Commissioner's Office announced new guidance and resources for data transfer risk assessments.
More

ICYMI

The recently proposed Digital Personal Data Protection Bill 2022 from India's Ministry of Electronics and Information Technology seeks to fulfill years of shortcomings with the Indian government's prior draft data protection legislation. And, PwC Senior Associate Ravin Nandle, CIPT, runs down what's familiar and what's new about MEITY's latest proposal.
More