Issue 288

  • European Parliament’s Committee on Employment and Social Affairs published a draft agenda on AI in the workplace.
  • The European Commission has initiated work on a code of practice aimed at enhancing transparency of AI-generated content.
  • Ireland’s Data Protection Commission raised concerns about LinkedIn’s plan to use personal data to train AI models.
  • NOYB issued a statement on the leaked internal draft of the Digital Omnibus proposal by the European Commission.
  • Spanish authority, AEPD fines Bizum payment systems EUR 100,000 for data breach impacting customers.
  • A bill to regulate AI systems introduced in Turkish Parliament.
  • Monaco Data Protection Authority publishes 2024 Annual Activity Report.
  • French data watchdog CNIL launched a survey examining the role of Data Protection Officers in AI governance.
  • Cyber Security and Resilience (Network and Information Systems) Bill introduced in the Parliament.
  • Department for Science, Innovation and Technology announces new legislation to tackle AI child abuse.
  • EPIC released a reference guide on regulations applicable to AI chatbots used by children and teenagers.
  • A bill introduced in the US Senate to mandate AI chatbots to implement authenticated age verification measures.
  • Ecuador’s Data Protection Superintendency issued a regulation for large-scale personal data processing and legitimate interest as legal basis.
  • The New York Algorithmic Pricing Disclosure Act has officially come into force.
  • California Privacy Agency publishes overview of Delete Request and Opt-out Platform system
  • Texas authorities initiated legal action against largest online gaming sites for violating child safety laws.
  • A coalition of state Attorneys General reached a USD 5.1 million settlement with an educational technology company following a student data breach.
  • US Senator introduces Health Information Privacy Reform Act.
  • Singapore introduced the Health Information Bill to Parliament.
  • Ministry of Electronics & Information Technology, India has officially notified the Digital Personal Data Protection Rules, 2025.
  • Ministry of Communication, Digital Technology and Innovations, Ghana opens public consultation on Data Protection Bill, 2025.
  • Kenya’s Office of the Data Protection Commissioner orders Telecommunications Company to pay KES 700,000 for unlawful data processing.