Issue 273

  • The European Data Protection Board adopted a statement outlining its plan to support the simplification of the EU General Data Protection Regulation.
  • The Berlin Commissioner for Data Protection and Freedom of Information requested that both Apple and Google block the Chinese generative AI model DeepSeek from their app stores.
  • The U.K. Information Commissioner’s Office opened a public consultation on its existing cross-border data transfer guidance.
  • Meta confirmed limited updates were made to its pay-or-consent advertising model in the EU ahead of the deadline for required changes issued by the European Commission.
  • The EDP Supervisor detailed in its meeting with the DPN, which focused on emerging technologies, data breaches and the role of the data protection officer.
  • Germany’s DPC found 40 federal web pages with directly embedded YouTube videos during an automated review of over 500,000 pages.
  • California AG Rob Bonta announced a USD 1.55M settlement with Healthline Media over alleged CCPA violations.
  • The Utah attorney general’s office sued social platform Snap for alleged children’s online safety violations.
  • A Santa Clara County Superior Court jury awarded more than USD 314.6 million in a 2019 class-action lawsuit against Google, alleging it collected data from Californians’ Android phones while they were idle.
  • Mississippi urged the 5th Circuit to reinstate its age verification law after a judge blocked it over First Amendment concerns.
  • Peru’s health care regulator, Susalud, issued a PEN688,750 fine to the Delgado Clinic after the clinic allegedly shared singer Shakira’s health data on social media.
  • South Korea’s privacy watchdog investigated Papa John’s Korea over a data breach linked to poor website source code management.