The EU Data Governance Act is officially a go — the regulation became applicable on 24 Sept. The purpose of the DGA was not to confuse privacy professionals with another acronym but, rather, to create a mechanism to enable the safe use of public sector data, establish rules for data intermediary ser...

France's data protection authority, the Commission nationale de l'informatique et des libertés, fined multinational air freight provider SAF Logistics 200,000 euros for alleged EU General Data Protection Regulation violations related to employee data. The CNIL acted on a complaint the company carrie...

Hong Kong's Office of the Privacy Commissioner for Personal Data is investigating a Consumer Council data breach. The PCPD received a breach notification from the council, which announced a "system disruption" on its website but did not reveal further details. "Having considered that the incident ma...

Norway's data protection authority, Datatilsynet, submitted formal testimony on the government's updated national digitization strategy. Datatilsynet incorporated a 2022 report from the Personal Data Protection Commission, which called for a "national privacy policy that lays down guidelines for the...

India's Digital Personal Data Protection Act, 2023 creates a new framework for the protection of digital personal data, offering four broad rights to "data principals" and setting compliance tasks for "data fiduciaries." Spice Route Legal Partner Mathew Chacko, Counsel Aadya Misra and Associate Ajee...