In this week’s global legislative roundup, the Indian government informed the Supreme Court of India the revised Personal Data Protection Bill would be tabled for the winter session of Parliament. The U.K. Information Commissioner’s Office issued public reprimands of public and private entities that failed to adequately respond to data subject access requests. Compromise amendments to the proposed EU Artificial Intelligence Act were introduced. And U.S. President Joe Biden is expected to sign an executive order on U.S.-EU data flows in the near future.

Latest News

The Personal Data Protection Commission of Singapore issued a reminder that new amendments to the Personal Data Protection Act went into effect Oct. 1.
More

Ireland's Data Protection Commission submitted a preliminary decision on Facebook's April 2021 data breach to members of the European Data Protection Board under Article 60 of the EU General Data Protection Regulation.
More

Argentina's data protection authority, the Agency of Access to Public Information, extended the public consultation on proposed amendments to Law No. 25.326 on the Protection of Personal Data to Oct. 11.
More

According to Husch Blackwell's "Byte Back," the Colorado attorney general's office released draft regulations for the Colorado Privacy Act.
More

Enforcement

Canadian Parliament tabled the Office of the Privacy Commissioner of Canada's 2021-2022 annual report.
More

The Irish government announced Ireland's Data Protection Commission will see a 13% budget increase for 2023.
More

The U.K. Information Commissioner’s Office issued reprimands and practice recommendations for seven public and private entities for failure to respond to subject access requests.
More

Mediapost reports a coalition of 19 advertising and business groups wrote the U.S. Federal Trade Commission to request an extension to the 60-day public consultation for the agency's Advance Notice of Proposed Rulemaking on commercial surveillance and lax data security.
More

Asia-Pacific

The Government of India told the Supreme Court of India that a revised data protection bill will be tabled in Parliament's Winter Session, ANI reports.
More

Europe

Andorra's Data Protection Agency announced the government approved decrees on regulations for the application of Law 29/2021, of 28 October, of Personal Data Protection, and agency regulations.
More

European Parliament co-rapporteurs Dragoş Tudorache and Brando Benifei disseminated compromise amendments for the EU Artificial Intelligence Act, which were reviewed by Euractiv.
More

US

U.S. President Joe Biden is expected to publish an executive order concerning a new agreement on EU-U.S. data flows as early as Oct. 3, Politico reports.
More

U.S. Rep. Ted Lieu, D-Calif., proposed the Facial Recognition Act of 2022. 
More

Guidance

Nova Scotia's government released its annual Information Access and Privacy Services compliance report for requests made under the Freedom of Information and Protection of Privacy Act. 
More

France’s data protection authority, the Commission nationale de l'informatique et des libertés, created a compliance checklist for controllers operating health data warehouses.
More

ICYMI

China’s long-awaited Measures for Security Assessment of Outward Data Transfer went into effect Sept. 1, offering some form of clarity regarding entities operating in and outside of China. PwC Partner Barbara Li, CIPP/E, breaks down the guidelines and offers practical recommendations for companies facing the possibility of noncompliance for the IAPP.
More

The Irish Data Protection Commission’s 405 million euro fine against Meta represents a “watershed moment” in EU General Data Protection Regulation enforcement, Bird & Bird’s Head of Privacy and Data Protection, Ireland, Anna Morgan and Associate Heather Catchpole write for the IAPP, because it represented the first GDPR cross-border data processing case involving children’s personal data.
More