Issue 315

APAC

  • India’s Ministry of Electronics and IT invited applications for the positions of Chairperson and Members of the Data Protection Board of India
  • South Korea’s Internet and Security Agency signed an agreement to strengthen cybersecurity across the automotive supply chain.
  • China’s CAC issued measures regulating online marketing of financial products to enhance internet finance activities oversight and consumer protection.
  • Australian Prudential Regulation Authority called for stronger governance and risk management to address AI risks in regulated industries.
  • New Zealand’s Information Privacy Principle 3A on notification requirements for indirect collection of personal information, came into effect.

EMEA

  • The European Data Protection Board and Supervisor adopted a joint opinion on the proposed Cybersecurity Act 2 and amendments to the NIS2 Directive.
  • UK’s ICO published final guidance on storage and access technologies, including cookies, tracking pixels and device fingerprinting.
  • Italy’s Competition and Market Authority concluded investigations into AI providers after securing commitments to improve transparency regarding AI hallucination.
  • Germany’s Cabinet approved a draft law mandating precautionary retention of IP addresses to strengthen online crime investigation.
  • Irish DPC launched an inquiry into an apparel company’s transfer of personal data from EU to China.
  • Portugal’s Communications Authority opened a public consultation on draft guidelines for implementing AI literacy under the EU AI Act.
  • The European Commission and Data Protection Board announced plans to develop joint guidance on the interplay between competition and data protection laws.
  • Belgium’s Centre for Cybersecurity adopted a new national cyber crisis response plan to strengthen preparedness and coordination.
  • Poland’s Personal Data Protection Office issued its opinion on the draft Artificial Intelligence Systems Act.
  • Luxembourg’s Official Journal published the NIS2 transposition law, establishing measures to enhance the resilience of critical entities.

Americas

  • The U.S. Federal Trade Commission secured an order prohibiting a data broker from selling sensitive location data.
  • Brazil’s ANPD launched a public consultation on draft guidance for suppliers of IT products and services.
  • California’s Privacy Protection Agency issued positions on bills related to sensitive personal information, data brokers and privacy of elected officials and judges.
  • New York’s Attorney General supported legislation banning surveillance pricing and electronic shelf labels in retail stores.
  • Iowa Governor signed an Act establishing requirements and guidelines for conversational AI services.
  • Canada’s privacy regulator published findings from a joint investigation into an AI company.
  • A bill amending the Connecticut Data Privacy Act to strengthen consumer privacy protections and regulate data brokers, passed by the House.