EU & UK
- The ICO and the Office of the Privacy Commissioner of Canada (OPC) have issued a joint letter urging the protection of 23andMe’s customer data during its bankruptcy proceedings.
- The UK and Japan signed a Memorandum of Cooperation on April 28, 2025, focusing on quantum science and technology.
- Belgian DPA ordered SPF to comply with GDPR for data transfers under FATCA, prohibiting the transfer of tax data of Belgians.
- The U.K. ICO and the California Privacy Protection Agency signed a declaration of cooperation, harmonising privacy and data protection across the two jurisdictions.
- Polish SA imposed an administrative fine of EUR 262,500 for hidden video surveillance in the neonatal department and failure to implement appropriate security measures.
- The Spanish AEPD fined School Fitness Holidays & Franchising S.L. EUR 21,600 for GDPR violations after a complaint about unauthorised use of a customer’s image.
AMERICAS
- DOJ accused Illinois of interfering with federal immigration policy via workplace privacy law.
- AG Nessel filed a lawsuit against Roku for data collection practices that violate the Children’s Online Privacy Protection Act and the Michigan Consumer Protection Act.
- U.S. Senate Minority Leader sent a letter to the Federal Trade Commission urging the agency to establish safeguards for companies’ use of neural data.
- U.S. Senator introduced the App Store Accountability Act today, providing parents with tools to protect their children from harmful content on mobile apps.
- The CCPA Board approved a revised package of draft regulations covering automated decision-making technology and risk assessments for a second round of public comments.
ASIA PACIFIC
- South Korea’s MSIT and KISA announced they received a report from SK Telecom on a major data breach; an investigation is underway.
- The Department of Personal Data Protection in Malaysia issued guidelines on cross-border data transfers, detailing conditions and obligations for data controllers, including the need for a valid legal basis.