Issue 287

  • Seventy-two UN Member States, along with the EU, have signed a new convention aimed at combating cybercrime.
  • Global Privacy Enforcement Network will conduct a privacy sweep focused on protecting children’s data.
  • European Data Protection Board has adopted its opinion on the draft adequacy decision for Brazil.
  • Swiss Federal Council has launched consultation on communication platforms and search engines regulation
  • UK ICO has opened consultation on enforcement procedural guidance 
  • CNIL has released a survey exploring public readiness to pay for online services without targeted advertising.
  • European Commission has adopted new rules under the Digital Services Act (DSA), granting researchers access to large online platforms’ data.
  • Finland’s Data Protection Ombudsman has fined Aktia Bank EUR 865,000 for inadequate security measures in its electronic identification service.
  • Swedish DPA to investigate on IT company for data breach of 1.5M people.
  • EU may delay parts of AI Act under pressure from U.S. and big tech.
  • EU think tank proposal to establish a new EU tech enforcement agency.
  • Hungary has officially enacted its national AI law.
  • Germany’s Federal Data Protection Commissioner has approved the first consent manager under the Consent Management Ordinance.
  • Texas Attorney General has finalized a USD 1.3 billion settlement with Google over privacy violations.
  • EPIC has urged the FTC to block Meta’s plan to use chatbot data for targeted advertising
  • Attorney General has released the 2025 enforcement report under the Oregon Consumer Privacy Act
  • Final phase of compliance with amendments to the NYDFS Cybersecurity Regulation has come into effect.
  • New Zealand’s Biometric Privacy Code governing new processing activities is now in force.
  • The Office of the Australian Information Commissioner has released 2024-2025 annual report
  • National People’s Congress of China has passed amendments to the Cybersecurity Law.
  • Vietnam has introduced a National Data Architecture Framework
  • India’s Ministry of Electronics and IT unveiled AI governance guidelines
  • China’s CAC has published Q&A on new regulations for cross-border data flows.
  • Singapore’s Cybersecurity Amendment Act has entered into force.