Issue 286

EU & UK

  • European Parliament published a study analysing the interplay between the AI Act and the EU digital legislative frameworks.
  • EDPS published guidance on generative AI, to strengthen data protection within EU institutions.
  • UK ICO fined a sole trader GBP 200,000 for sending nearly one million unsolicited marketing texts.
  • The European Commission will establish the Digital commons EDIC, to jointly develop and operate sovereign cross-border digital infrastructures.
  • NOYB files a criminal complaint against Clearview AI.
  • Norway’s Datatilsynet released a note on the handling of pseudonymized data following the CJEU judgement.
  • Apple may disable its ‘App Tracking Transparency’ feature in the EU.
  • EC found TikTok and Meta in violation of the Digital Services Act’s transparency requirements.
  • Dutch Data Protection Authority published new guidelines to promote AI literacy.
  • AZOP, Croatia’s data protection authority issued FAQs regarding the EU AI Act.

Americas

  • California’s AG reached a USD 530,000 settlement with Sling TV for violations of the CCPA.
  • EPIC published a report summarizing five years of State Attorneys General privacy enforcement actions (2020–2024).
  • Colombia data authority SIC publishes draft Model Contractual Clauses for international data transfers.
  • Florida AG issued a criminal subpoena to Roblox in an effort to protect children online.
  • A new bill titled the AI–WISE Act was introduced in the U.S. House of Representatives.
  • SIC fined Columbia Telecommunications COP 670 million for unlawful data processing.
  • California Department of Justice announced plans to solicit public comments on the Protecting Kids from Social Media Addiction Act.
  • U.S. Senators introduced a bipartisan bill to safeguard children from AI chatbots.
  • Colombia’s House Committee approved a combined bill to amend the national data protection law.

APAC

  • Singapore’s Cyber Security Agency opened a public consultation on an addendum to AI security guidelines.
  • China’s Ministry of Industry and Information Technology published app notifications for violations of user rights.
  • The Australian government launched a consultation on the use of copyright material in AI systems.
  • China’s Cyberspace Administration and State Administration for Market Regulation issued new measures for authenticating personal information exported abroad.
  • Hong Kong’s Privacy Commissioner released guidance on CCTV, drones, and in-vehicle camera usage.