In this week’s global legislative roundup, U.S. President Joe Biden issued an executive order implementing the long-awaited the EU-U.S. Data Privacy Framework. Following the cyberattack of telecommunications company Optus, the Australian government released new consumer privacy rules. And U.K. Secretary of State for Digital, Culture, Media and Sport Michelle Donelan announced intent to alter the current approach to U.K. General Data Protection Regulation reform.

Latest News

Nigeria released its draft Data Protection Bill, 2022 outlining a legal framework for personal data protection.

More

The U.S. Biden administration released a fact sheet on steps being taken to strengthen and safeguard United States’ cybersecurity, including the creation of a cybersecurity standards label for Internet of Things devices.

More

The California Privacy Protection Agency Board will host its next meeting over two days beginning Oct. 21.

More

Enforcement

Privacy Commissioner of Canada Philippe Dufresne said a recent report from the Standing Committee on Access to Information, Privacy and Ethics on facial recognition technology reinforced the need to regulate technologies "such as facial recognition and artificial intelligence."

More

Sébastien Vachon-Desjardins, a former Canadian government employee and member of a Russian ransomware gang, was sentenced to 20 years in prison after being convicted in U.S. federal court on four charges, including computer fraud, CBC News reports. 

More

The European Data Protection Board Coordinated Supervision Committee published its biannual activities report for 2020-2022.

More

The EDPB published its October plenary agenda, which includes a range of notable topics, including updates to guidelines identifying a controller or processor's lead supervisory authority and data breach notification guidance.

More

The Philippines National Privacy Commission launched an investigation into data aggregators, the Philippine Daily Inquirer reports.

More

The Personal Data Protection Commission of Singapore issued a reminder that new amendments to the Personal Data Protection Act went into effect Oct. 1.

More

The U.K. Information Commissioner’s Office fined catalog retailer Easylife 1.48 million GBP for using personal information of nearly 150,000 customers to target them with advertisements.

More

The Washington Post reports a federal jury found former Uber Chief Security Officer Joe Sullivan guilty of obstructing justice during the U.S. Federal Trade Commission's probe into the ride-hailing app's 2016 data breach. 

More

Asia-Pacific

Following the cyberattack of Australian telecommunications company Optus, the Australian government released new consumer privacy rules Oct. 6, Reuters reports. 

More

Following the data breach of Optus, Salinger Privacy Principal Anna Johnston, CIPP/E, CIPM, FIP, writes the Australian government must avoid a “knee-jerk legislative response.”

More

Europe

The Czech Presidency of the Council of the European Union announced final approval of the Digital Services Act.

More

TechCrunch reports U.K. Secretary of State for Digital, Culture, Media and Sport Michelle Donelan announced intent to alter the current approach to U.K. General Data Protection Regulation reform in a way that will "focus on growth and common sense" while being "business and consumer-friendly."

More

US

The U.S. House New Democrat Coalition announced its support for the proposed American Data Privacy and Protection Act.

More

The Biden administration released the first U.S. artificial intelligence framework Oct. 4, Nextgov reports.

More

Gov. Gavin Newsom, D-Calif., recently signed two bills into California law that protect individuals' abortion data, Health IT Security reports.

More

Guidance

The U.K. Information Commissioner's Office published guidance for marketers using live marketing calls. 

More

The White House Office of Science and Technology Policy published "Blueprint for an AI Bill of Rights," which provides design, development and deployment guidelines for artificial intelligence technologies.

More

ICYMI

The U.S. took the latest step forward in finalizing a new EU-U.S. data flow agreement. U.S. President Joe Biden issued the long-awaited executive order mandating new legal safeguards over U.S. national security agencies' access and use of EU and U.S. personal data. IAPP Staff Writer Joe Duball had the details for The Privacy Advisor.

More