EU & UK
- Germany’s Interior Ministry urged the U.S. to honour its commitments under the EU-U.S. Data Privacy Framework amid concerns of a possible withdrawal.
- Meta Platforms, Inc. is planning to restart AI training using publicly available data from EEA Facebook and Instagram users, including historical and future posts, from users over 18 years old.
- The ICO fined DPP Law Ltd GBP 60,000 for inadequate data security after a June 2022 cyberattack stole 32GB of data and exposed client information on the dark web.
- The Dutch data protection authority (AP) announced that it had warned 50 organizations by letter about their misleading cookie banners.
- EDPB published an opinion on the draft decision by the CNIL regarding Lexing GDPR certification criteria, concluding it does not provide appropriate safeguards for international data transfers.
AMERICAS
- A whistleblower disclosed to Congress that the Department of Government Efficiency had allegedly been given access to sensitive agency data.
- Sen. Markey and Rep. Castor urged the FTC to open an investigation into new allegations that Meta violated COPPA.
- AG Platkin sued messaging app “Discord” for unlawful practices that expose nj kids to child predators and violent, sexual content.
- A U.S. District Court permanently struck down Ohio’s age verification law in NetChoice v. Yost, ruling it unconstitutional for violating online privacy and free speech rights.
ASIA PACIFIC
- The People’s Bank of China and other authorities published Guidelines for Promoting and Regulating Compliance of Cross-border Data Flows in the Financial Industry.