Issue 298

  • The Advertising Standards Council of India published a white paper on navigating cookie consent in light of new data protection framework. 
  • Australia’s Online Safety Amendment Act, restricting social media access for children came into force. 
  • On Data Privacy Day, India’s Press Information Bureau released an explainer highlighting country’s evolving digital governance ecosystem. 
  • China’s CAC invited public comments on draft Regulations on the Collection and Use of Personal Information by Internet Applications. 
  • A leading Indian IT services company announced plans to apply for registration as a consent manager under the DPDP Act. 
  • South Korea’s Personal Information Protection Commission released a notice of partial amendment to the Personal Information Protection Level Assessment. 
  • Personal Information Protection Commission of Japan published a draft policy for revision of the three-year review system of the Act on Personal Information Protection. 
  • European Commission published a summary and individual submissions received in response to consultation on review of the Digital Markets Act.  
  • CNIL, France imposed fines of EUR 42 million on telecommunications company and its subsidiary for inadequate data security measures. 
  • Spanish Data Protection Agency published a note analysing the risks of using third-party images in AI systems. 
  • Data Protection Authorities of Denmark, Norway and Liechtenstein jointly released a notice on personal data transfers to China by a social media platform. 
  • Italy’s Cybersecurity Agency issued guidelines for incident management under the NIS2 Directive.  
  • Belgian Data Protection Authority published opinion on proposed amendments to the Economic Law Code to combat unsolicited marketing. 
  • Iceland’s Data Protection Authority published amendments to the rules on electronic monitoring. 
  • Financial Supervisory Authority of Norway released a report on deficiencies in ICT activities of an insurance company. 
  • Netherland’s Cyber Security Centre and Digital Trust Centre announced their merger.  
  • New York’s Artificial Intelligence Consumer Protection Act introduced in the Senate. 
  • The Electronic Privacy Information Center submitted comments to the US Citizenship and Immigration Services on biometric data collection. 
  • South Dakota introduced legislation to enhance protections for genetic data. 
  • Bill to amend the Consumer Data Protection Act introduced in Virginia. 
  • California’s Privacy Agency imposed a fine of USD 62,600 on a capital markets company for failure to register as a data broker. 
  • Bill on surveillance pricing and addictive online platforms introduced in the Kentucky House of Representatives. 
  • Texas’s Responsible Artificial Intelligence Governance Act entered into force. 
  • California law on data broker governing data collection and deletion came into effect. 
  • UAE Government issued a Federal Decree-Law on Child Digital Safety. 
  • Turkish Data Protection Authority released a new issue of its Journal of Personal Data Protection.