Issue 244

  • Ireland’s DPC welcomed the outcome of prosecution proceedings against Valterous Limited for direct marketing violations.
  • EDPB requested comments on Guidelines 02/2024 on Article 48 of GDPR.
  • The European Supervisory Authorities (ESAs), comprising ESMA, EIOPA, and EBA, released a statement on the Digital Operational Resilience Act (DORA) application.
  • An administrative fine was imposed on Posti for unlawful processing of personal data.
  • EDPB clarified rules for data sharing with third-country authorities and approved EU Data Protection Seal certification.
  • OCR fined Gulf Coast Pain Consultants, a health consultancy, $1.19M for HIPAA security rule violations.
  • FTC reported that data brokers unlawfully tracked protesters and US military personnel.
  • Washington voiced increasing concern over Beijing’s alleged efforts to burrow deep into U.S. telecommunications companies, to steal data about US calls.
  • The U.S. Senate Committee urged the House of Representatives to pass the Kids Online Safety and Privacy Act (KOSPA), which passed the Senate in July 2024.
  • Pakistani influencer Maryam Faisal’s alleged private video leaked online, 5th case in 5 weeks.
  • Australia and the United Kingdom signed a new agreement to combat phone scams, spam, and unsolicited calls.
  • Vietnam’s National Assembly passed the Data Law regulating digital data use and management and established the National Data Centre and General Database.