Issue 150

Dear Subscribers and Readers,

With your support, we are publishing the 150th issue of our weekly newsletter on data protection and privacy covering updates on regulations, guidance, and enforcements from around the globe.

We thank you for your continuous patronage and hope that you enjoy reading our newsletter just as much as we enjoy creating it. We will continue to bring you regular insights on the national and international developments in the field of data protection and privacy.

Follow us on LinkedIn, Twitter and share with your peers/colleagues for subscribing to our newsletter.

A special thanks to our contributors Tirthesh Shah, Ayushi Modi, Chinmay Verma, and Purvi Morwal.


  • Commissioner for Personal Data Protection of Cyprus published a statement on the extent to which police can publish photos of suspects.
  • Finland’s Data Protection Ombudsman warned healthcare providers about the use of tools to analyze the personal data of patients.
  • European Parliament approved draft rules for cross-border sharing of information to fight terrorism.
  • UK’s Information Commissioner’s Officer published draft guidelines on health information of workers for public consultation. The consultation will remain open until 26 January 2023.


  • Federal Trade Commission (FTC) takes action against Drizly, an online alcohol marketplace for alleged security failure causing a data breach of about 2.5 million consumers.
  • California Privacy Protection Agency announced its admission to the Global Privacy Assembly as a full voting member.
  • Consumer Financial Protection Bureau launched new rulemaking that strengthens consumers’ access and control over their financial data.
  • Senator for Oregon called for security clearance for FTC Privacy Regulators for protection against cybersecurity threats.


  • New Zealand’s Privacy Commissioner launched a survey on how small businesses deal with personal data every day. Responses may be submitted until 18 November 2022.
  • Japan’s Ministry of Economy, Trade, and Industry released a draft of revised Cybersecurity Management Guidelines. Comments may be submitted until 6 December 2022.
  • Australian Council of Trade Unions passed a resolution for the protection of employee data used by employers.

Read our digital newsletter here.