Issue 251

EU & UK

  • Garante banned DeepSeek from processing Italian users’ personal data.
  • DSIT published an AI Safety Report that discussed general-purpose AI advancements, risks, and the need for international risk management.
  • The CNIL launched a consultation on a draft evaluation scheme about GDPR Certification for Data Processors.
  • The AP released guidance for enhancing AI literacy in line with the EU Artificial Intelligence Act, mandating AI system developers ensure users possess the necessary skills for responsible use.
  • The EU’s General Court held that the Irish DPC acted unlawfully when it refused to investigate a NOYB complaint.
  • HmbBfDI outlined obligations and requirements under the AI Act taking effect in February 2025.

AMERICAS

  • House Bill 1672, referred to the House Committee, sets forth regulations for employers’ use of electronic monitoring and automated decision systems in the workplace.
  • A House bill for an act to establish the artificial intelligence regulation task force and for related purposes was passed in the Mississippi State House of Representatives.
  • Senate joint resolution introduced and referred to the judicial committee, it proposes to amend the Wyoming constitution to provide for a right of individual privacy.
  • The NY AG published Assurance of Discontinuance No. 24-103 and it reached a $450,000 settlement with companies over pooled data security.

ASIA PACIFIC

  • The privacy amendment bill of New Zealand was read in the parliament for the second time and is waiting for its enforcement.
  • The PPC of Thailand published a notification in the Official Gazette exempting certain small businesses from maintaining a ROPA document.