Issue 227

EU & UK

  • The Norwegian data protection authority announced that the Oslo District Court issued its decision in the case regarding and upheld NOK 65M Grindr fine.
  • The EU Commission sent a request for information (RFI) to Temu and Shein under the Digital Services Act (DSA) following a complaint submitted by consumer organizations.
  • Second report on the State of the Digital Decade called for strengthened collective action to propel the EU’s digital transformation.
  • EU Commission sent preliminary findings to Meta over its “Pay or Consent” model for breach of the Digital Markets Act.

AMERICAS

  • The US Senator for Colorado, John Hickenlooper, announced that a bill would be introduced requiring third-party audits for artificial intelligence (AI).
  • OCR reached a USD 950,000M settlement with Heritage Valley Health System for HIPAA Security Rule breach.
  • Indiana’s District Court blocked an Act relating to age verification for harmful materials to minors from coming into effect.

ASIA PACIFIC

  • Hong Kong’s PCPD welcomed the Court conviction of a car company for direct marketing offences.
  • The EU Commission announced the entering into force of the EU-Japan deal on data flows.