Issue 310

APAC

  • The Indian Ministry of Electronics and IT published draft amendments to IT Rules on regulating synthetically generated information for stakeholder consultation.
  • China’s CAC released a new batch of deep synthesis algorithm filings, urging compliance with recommendation service regulations.
  • South Korean Personal Information Protection Commission revised guidelines for processing pseudonymized information.
  • Japan’s cabinet approved a bill proposing amendment to the Protection of Personal Information Act.
  • Cyber Security Agency of Singapore issued advisory on protecting websites from cyber-attacks.

EMEA

  • EU’s Cybersecurity Agency launched a public consultation on draft EU Digital Wallets certification scheme.
  • ICO, UK released a report on the use of automated decisions in the recruitment process, emphasising the need for appropriate safeguards.
  • France’s Senate examined a bill aimed at enhancing protections for minors from the risks of exposure to social media.
  • German Parliament adopted legislation implementing EU Data Act and Data Governance Act.
  • Italy’s Data watchdog imposed EUR 563,050 fine on an energy company for unlawful telemarketing and customer data processing.
  • Portugal’s NIS2 transposition law came into force, with new cybersecurity obligations for companies.
  • Finland’s Data Protection Ombudsman fined a telecom directory company EUR 5,000 for failing to provide call recordings.
  • Poland’s Council of Ministers adopted draft AI law to implement EU AI Act and strengthen oversight of AI systems.
  • The Netherlands Data Protection Authority launched an investigation into a telecom company following data breach.
  • Saudi Data and AI Authority launched public consultation on draft Responsible AI Policy.
  • Tanzania Data Protection Commission announced enforcement of Personal Data Protection Act following registration deadline.

Americas

  • The U.S. Federal Trade Commission secured an order against dating platform for sharing users’ personal data with third parties.
  • New York’s RAISE Act mandating transparency and incident reporting for frontier AI models, signed by Governor. 
  • Utah enacted a law mandating age verification for harmful online content and introducing tax to fund mental health initiatives.
  • A coalition of U.S. Attorney Generals sought enforcement of court order to block Medicaid data sharing with immigration authorities.
  • California’s Governor issued an executive order to strengthen AI procurement standards and responsible use safeguards.
  • Oregon bill requiring AI companions to disclose non-human interaction signed by the Governor.
  • Alabama’s Personal Data Protection Act granting consumer rights and regulating data processing passed by the Senate.
  • Iowa’s Attorney General filed a lawsuit against a healthcare company for data breach exposing sensitive personal and health data.