In this week’s Privacy Tracker legislative roundup, read about New Zealand's Customs and Excise Act 2018, which came into effect. In India, the government extended the deadline for public comments on the draft Personal Data Protection Bill, 2018, to Oct. 10., and a new ruling from the nation's Supreme Court found the country's controversial biometric identity system, Aadhaar, is constitutional. In California, Gov. Jerry Brown signed new laws, including a broad cybersecurity law governing internet-of-things devices, a state net neutrality law, and a law that will add transparency to police investigations and recordings. 

LATEST NEWS

The Indian government extended the deadline for public comments on the draft Personal Data Protection Bill, 2018 to Oct. 10, ET Retail reports.
More

New Zealand’s Customs and Excise Act 2018 came into effect, setting guidelines for how customs can perform “digital strip-searches,” Radio NZ reports.
More

California Gov. Jerry Brown signed into law a broad cybersecurity bill governing internet-of-things devices, requiring IoT makers to ensure devices have “reasonable” security features that “protect the device and any information contained therein from unauthorized access, destruction, use, modification, or disclosure,” CNet reports.
More

California Gov. Jerry Brown signed new laws that will give the public access to internal police investigations and video footage of shootings by police officers, The Los Angeles Times reports.
More

Following the signing of California’s new net neutrality law, the Department of Justice filed suit against the state of California, Multichannel News reports.
More

ICYMI

In this Privacy Tracker post, Laurent De Muyter offers an overview of how Belgium’s GDPR implementation law has applied the national exceptions in the GDPR; the rules for international data transfers, territorial scope, collective redress and injunctions; the use of cameras; and the new institutions it creates. 
More

In this Privacy Tracker post, Pranav Rai, CIPP/A, writes about India's path to legalizing same-sex relationships and the how the Supreme Court's 2017 ruling declaring privacy a fundamental right was instrumental in the judgment.
More

If the new EU Code of Practice on Disinformation adopted by online ad giants is not effective, IAPP European Correspondent Jennifer Baker reports for The Privacy Advisor, MEPs believe “legislation is needed to make such ethical rules compulsory.”
More

A highly anticipated hearing was held by the U.S. Senate Commerce Committee Wednesday, in which privacy and legal executives from some of America's top technology companies testified on the prospects of a national privacy law. Jedidiah Bracy, CIPP, has the details in this report for The Privacy Advisor.
More

In this Privacy Tracker post, IAPP Extern Towhudul Islam offers an analysis of Colorado’s Act Concerning Strengthening Protection for Consumer Data Privacy.
More

US

The National Institute of Standards and Technology's Cybersecurity for the Internet of Things and Privacy Engineering Programs has issued a draft internal report on managing cybersecurity and privacy risks in IoT devices.
More

The U.S. Department of Justice met with attorneys general and other representatives from 13 states and the District of Columbia for a “listening session” on data privacy, Reuters reports.
More

Voya Financial will be the first company to settle a case with the U.S. Securities and Exchange Commission under the Identity Theft Red Flags Rule for a 2016 data breach, Reuters reports.
More

The U.S. Federal Trade Commission announced four companies have agreed to settle allegations of falsely claiming certification under the EU-U.S. Privacy Shield agreement.
More

The U.S. Federal Trade Commission swore in Christine Wilson as the latest commissioner, replacing Maureen Ohlhausen whose term expired Wednesday.
More

A new report from Reps. Will Hurd, R-Texas, and Robin Kelly, D-Ill., examines the current state of America’s artificial intelligence ecosystem, provides lessons learned from AI congressional hearings, and offers recommendations for how the government can support and steer AI development, Nextgov reports.
More

ASIA-PACIFIC

The Sydney Morning Herald reports crossbench senators voiced concerns over Australia's proposed Assistance and Access Bill 2018 that would compel telecommunications companies to embed spyware in customers’ phones on behalf of enforcement agencies.
More

Zhuang Rongwen, director of the Cyberspace Administration of China, published a blueprint for how to govern the Chinese internet in the ruling party’s bimonthly journal on political theory, "Qiushi," the South China Morning Post reports.
More

According to a new ruling from the nation's Supreme Court, India's controversial biometric identity system serving 1 billion citizens, Aadhaar, is constitutional, BBC News reports.
More

CANADA

The Office of the Privacy Commissioner of Canada has released its 2017–18 Annual Report to Parliament.
More

EUROPE

The European Commission has announced online platforms and the advertising industry have agreed to a self-regulatory Code of Practice that includes several commitments to counter online disinformation.
More

The European Data Protection Board released the agenda from its third plenary meeting, held Sept. 25.
More

The U.K. Financial Conduct Authority is planning to fine Tesco Bank as much as 30 million GBP over the cyberattack it suffered in 2016, the Financial Times reports.
More

The U.K. Investigatory Powers Tribunal ruled British intelligence agencies MI5, MI6 and the Government Communications Headquarters illegally gathered and examined information belonging to Privacy International, Al Jazeera reports.
More

The U.K. Information Commissioner's Office has served data analytics firm AggregateIQ with the first-ever formal notice under the EU General Data Protection Regulation, BBC News reports.
More

The U.K. Information Commissioner’s Office has fined Bupa Insurance Services Limited 175,000 GBP for failing to implement proper security measures following a data breach.
More

France’s data protection authority, the CNIL, has released a report on blockchain and the EU General Data Protection Regulation. (In French.)
More