EU & UK
- Garante banned DeepSeek from processing Italian users’ personal data.
- DSIT published an AI Safety Report that discussed general-purpose AI advancements, risks, and the need for international risk management.
- The CNIL launched a consultation on a draft evaluation scheme about GDPR Certification for Data Processors.
- The AP released guidance for enhancing AI literacy in line with the EU Artificial Intelligence Act, mandating AI system developers ensure users possess the necessary skills for responsible use.
- The EU’s General Court held that the Irish DPC acted unlawfully when it refused to investigate a NOYB complaint.
- HmbBfDI outlined obligations and requirements under the AI Act taking effect in February 2025.
AMERICAS
- House Bill 1672, referred to the House Committee, sets forth regulations for employers’ use of electronic monitoring and automated decision systems in the workplace.
- A House bill for an act to establish the artificial intelligence regulation task force and for related purposes was passed in the Mississippi State House of Representatives.
- Senate joint resolution introduced and referred to the judicial committee, it proposes to amend the Wyoming constitution to provide for a right of individual privacy.
- The NY AG published Assurance of Discontinuance No. 24-103 and it reached a $450,000 settlement with companies over pooled data security.
ASIA PACIFIC
- The privacy amendment bill of New Zealand was read in the parliament for the second time and is waiting for its enforcement.
- The PPC of Thailand published a notification in the Official Gazette exempting certain small businesses from maintaining a ROPA document.
