In this week’s Global News Roundup, the Privacy Commissioner of Canada reflected on the commission’s annual report. The European Data Protection Board published its binding decision in the Irish Data Protection Commission’s WhatsApp case. U.S. Republican lawmakers introduced another bill to ban citizens from downloading TikTok. And the Saudi Arabian Data and Artificial Intelligence Authority opened a public consultation period for secondary data use guidelines.
The Latest
The European Commission held a webinar to prepare national authorities for their role in Digital Services Act implementation.
An annual General Data Protection Regulation Fines and Data Breach Survey found European supervisory authorities issued 1.64 billion euros in fines since Jan. 28, 2022, a 50% increase over the prior year.
California Attorney General Rob Bonta announced California Consumer Privacy Act noncompliance letters were sent to various mobile application providers as part of a recent investigative sweep.
The Colorado attorney general’s office released the second set of revisions to the Colorado Privacy Act draft regulations.
Enforcement
Privacy Commissioner of Canada Philippe Dufresne said the Office of the Privacy Commissioner of Canada’s 2021-22 annual report revealed “a number of instances where there are still shortcomings in terms of how privacy is considered.”
The Office of the Privacy Commissioner of Canada announced findings from an investigation into Home Depot’s e-receipt sharing with Meta’s Facebook.Â
The European Data Protection Board published its binding decision in the Irish Data Protection Commission’s case against WhatsApp over violations of the GDPR concerning transparency and user consent.
European Commissioner for the Internal Market Thierry Breton told TikTok CEO Shou Zi Chew the platform faces a Sept. 1 ban in the EU if it does not address Digital Services Act compliance.
U.S. Federal Trade Commission Division of Consumer Protection Director Samuel Levine said the commission will continue to tightly regulate dark patterns used by commercial surveillance companies.
Asia-Pacific
Indian Minister for Railways, Communications, Electronics and Information Technology Ashwini Vaishnaw said the proposed Digital Personal Data Protection law will balance innovation with the protection of individuals’ rights.
Europe
The Council of the European Union is drawing closer to a consensus position on the proposed European Health Data Space.Â
The Swedish Presidency of the Council of the European Union offered its latest compromise text for the proposed Data Act.
The Council of the European Union and European Parliament reached agreement on the draft regulation and directive on cross-border access to electronic evidence.
European Parliament’s Internal Market and Consumer Protection Committee may tighten political advertising regulations to reduce election interference and improve transparency.
US
U.S. House Committee on Energy and Commerce Chair Cathy McMorris Rodgers, R-Wash., announced committee and subcommittee majority leadership for the 118th Congress.
U.S. lawmakers in both houses of Congress introduced legislation banning TikTok from being downloaded on Americans’ devices.
The California Privacy Protection Agency Board will hold a public meeting Feb. 3 with potential action on draft California Privacy Rights Act regulations on the agenda.
Two comprehensive privacy bills were introduced to the Hawaii Senate: Senate Bill 974 and SB 1110 passed their first readings on the Senate floor and await committee referrals.
The Indiana Senate Committee on Commerce and Technology voted 11-0 to advance Senate Bill 5, an act concerning consumer data protection.
A subcommittee of the Iowa House Committee on Economic Growth and Technology passed House Study Bill 12, an act to consumer data protection, to the full committee on a 3-0 vote.Â
The Massachusetts Legislature will consider two comprehensive privacy bills in addition to Senate Bill 745, which are Senate Bill 1971, the Massachusetts Information Privacy and Security Act, and House Bill 3245, the Internet Bill of Rights, both take aspects from the GDPR.
New Hampshire state Sen. Sharon Carson, R-N.H., introduced Senate Bill 255, an act relative to the expectation of privacy.
State Rep. Shelly Kloba, D-Wash., reintroduced House Bill 1616, the Washington People’s Privacy Act.
Guidance
The Saudi Arabian Data and Artificial Intelligence Authority opened public consultation for its secondary data use guidelines Jan. 25.Â
The Office of the Privacy Commissioner of Canada published a guide with five tips for improving privacy impact assessments.Â
For World Data Protection Day, the U.K. Information Commissioner’s Office encouraged small- and medium-sized businesses to review their data security practices.
The U.S. National Institute of Standards and Technology is considering revisions to its Cybersecurity Framework 2.0. IAPP Staff Writer Alex LaCasse has the details.
ICYMI
The IAPP compiled predictions from privacy professionals in 56 jurisdictions across six continents, including Australia, Brazil, China, EU and the U.S. in the “Global Legislative Predictions 2023� white paper to help privacy pros see what may play out across the world from on-the-ground experts.
The U.S. Department of Commerce National Institute of Standards and Technology released its Artificial Intelligence Risk Management Framework 1.0 Jan. 26. IAPP Staff Writer Alex LaCasse has the details.