Issue 296

EMEA

  • Garante, Italian Data Protection Authority imposed a EUR 400,000 fine on a security company for GDPR violation related to direct marketing practices.
  • Romania’s data watchdog fined an entertainment company RON 76,335 for failure to comply with data subject request under GDPR.
  • Croatia’s Personal Data Protection Agency imposed an administrative fine of EUR 1.5 million on a bank for GDPR infringements.
  • France’s CNIL launched a new tool to trace the genealogy of open-source AI models.
  • Jersey Office of the Information Commissioner opened consultation on proposed changes to data protection registration fees.
  • The Poland’s Personal Data Protection Office fined the District Sanitary Inspector PLN 20,000 for inadequate security measures.
  • An online gaming platform entered into cooperation with Russian communications regulator to remove harmful content and prevent criminal activity.
  • The Court of Justice of the European Union announced its decision on information to be provided while using body cameras.
  • Monaco’s Personal Data Protection Authority released summary report of draft law regulating remote biometric identification.
  • Turkish Personal Data Protection Authority announced data breach involving transportation company.

Americas

  • Pennsylvania bill on Genetic Data Disclosures approved by the House of Representatives.
  • US Department of Health and Human Services reached USD 112,500 settlement with occupational health provider for failing to provide medical records on time.
  • Brazilian Ministry published a guide on Privacy and Information Security Program.
  • US senators sent letters to AI companies for committing to timely and consistent safety reporting.
  • California’s Privacy Protection Agency released an enforcement advisory on registration requirements for data brokers.

Asia

  • Bill to amend provisions of the DPDP Act relating to the processing of children’s data introduced in the Indian Parliament.
  • South Korean e-commerce company announced USD 1.18 billion compensation to affected users for data leak.