Issue 278

  • ICO published updated draft guidance on the use of encryption under the UK GDPR. 
  • Austrian Data Protection Authority ordered YouTube to comply with Subject Access Requests. 
  • Irish DPC publishes guidance on personal data processing during school pre-enrolment. 
  • ISO released guidance on ISO/IEC 27018:2015, focusing on protecting personal information in public cloud environments.
  • Disney agreed to pay USD 10 million to the FTC for COPPA violations related to mislabeled YouTube content. 
  • Oregon AG released its first annual report on the Oregon Consumer Privacy Act.  
  • Google settles privacy class action lawsuit over targeted ads for USD 30 million  
  • The Office of the Privacy Commissioner of Canada announced funding for research projects studying the collection of personal information by smart devices.
  • Measures for Identifying AI-Generated Synthetic Content, jointly issued by several Chinese government bodies. 
  • South Korea’s data watchdog fines telecom company KRW 134.8 billion following a data breach