Issue 291

EU

  • Belgian Data Protection Authority imposed a EUR 40,000 fine on global data provider for invalid consent.
  • Italian Data Protection Authority (Garante) released an updated handbook on privacy practices at schools.
  • CNIL, French Data Protection Commission fined global financial services company EUR 1.5 million for cookie consent violations.
  • European Commission issued EUR 120 million penalty against X for failing to meet transparency obligations under the Digital Services Act.
  • New research released by NYOB highlighted strong user preference for avoiding tracking when presented with “pay or okay” consent models.
  • EU Parliament published a report analyzing the impact of AI on the financial sector.
  • Garante fined clinical research center EUR 70,000 for unlawful destruction of personal data.
  • Guernsey Office of the Data Protection Authority issued 10-step practical AI guidance.

Americas

  • Canadian bill proposing amendments to Personal Information Protection and Electronic Documents Act passed its first reading.
  • Illinois became the first U.S. state to introduce regulation governing AI-driven mental health therapy services.
  • Paraguay’s President signed the country’s new data protection law into force.
  • A coalition of Attorney Generals urged Congress to preserve state authority over AI Regulation.
  • Brazil’s Data Protection Agency launched a public consultation on Digital ECA, the Statute for the protection of minors online.
  • The US House Committee on Energy and Commerce announced a hearing covering 19 proposed bills on minors’ online protection.
  • EPIC and partner organizations called on U.S. Immigration and Customs Enforcement to stop using facial recognition technologies.
  • Federal Communications Commission finalized a USD 1.5 million settlement with large media and tech company for vendor data breach.

Asia

  • The Government of Vietnam unveiled its implementation plan for Personal Data Protection Law.
  • South Korea’s Personal Information Protection Commission fined a Law Firm KRW 529 million for large-scale data breach.
  • Vietnam’s Ministry of Science and Technology presented draft AI law to National Assembly.