Issue 296

EMEA

Garante, Italian Data Protection Authority imposed a EUR 400,000 fine on a security company for GDPR violation related to direct marketing practices.

Romania’s data watchdog fined an entertainment company RON 76,335 for failure to comply with data subject request under GDPR.
Croatia’s Personal Data Protection Agency imposed an administrative fine of EUR 1.5 million on a bank for GDPR infringements.
France’s CNIL launched a new tool to trace the genealogy of open-source AI models.
Jersey Office of the Information Commissioner opened consultation on proposed changes to data protection registration fees.
The Poland’s Personal Data Protection Office fined the District Sanitary Inspector PLN 20,000 for inadequate security measures.
An online gaming platform entered into cooperation with Russian communications regulator to remove harmful content and prevent criminal activity.
The Court of Justice of the European Union announced its decision on information to be provided while using body cameras.
Monaco’s Personal Data Protection Authority released summary report of draft law regulating remote biometric identification.
Turkish Personal Data Protection Authority announced data breach involving transportation company.

Pennsylvania bill on Genetic Data Disclosures approved by the House of Representatives.

US Department of Health and Human Services reached USD 112,500 settlement with occupational health provider for failing to provide medical records on time.
Brazilian Ministry published a guide on Privacy and Information Security Program.
US senators sent letters to AI companies for committing to timely and consistent safety reporting.
California’s Privacy Protection Agency released an enforcement advisory on registration requirements for data brokers.

Bill to amend provisions of the DPDP Act relating to the processing of children’s data introduced in the Indian Parliament.
South Korean e-commerce company announced USD 1.18 billion compensation to affected users for data leak.