Issue 180


  • The European Data Protection Board published a case digest, commissioned as part of its Support Pool of Experts initiative, on the right to object and to erasure.
  • The Courts and Tribunals Judiciary published the High Court of Justice’s judgment in Prismall v Google UK, in which it struck out a class action claim for damages in relation to loss of control over personal data against the Google UK Limited and DeepMind Technologies Limited, and ordered summary judgment in favor of the same.
  • The Polish data protection authority fined the disciplinary prosecutor of an unnamed bar association for PLN 23,580 for violating data security breach provisions.


  • The Office of the Privacy Commissioner of Canada launched an investigation into OpenAI, the operator of ChatGPT, in response to a complaint alleging the collection, use and disclosure of personal information without consent.
  • Congressional Research Service published a report titled ‘Generative Artificial Intelligence and Data Privacy: A Primer.’
  • The Office of the Privacy Commissioner of Canada announced the publication of a guide outlining key privacy considerations for employers subject to federal privacy legislation.
  • A Bill for the Maine Consumer Privacy Act was referred to the Judiciary Committee of the Maine House of Representatives.
  • Texas’s Bill for Data Privacy and Security Act was signed in both the Texas State Senate and the Texas House of Representatives, and awaits action by the Governor of Texas.


  • The Cyberspace Administration of China published the Guidelines for the Recording of Standard Contracts for Exporting Personal Information.
  • Philippines’s National Privacy Commission requested public comments on Draft Circular – Guidelines on Consent. Comments may be submitted until June 9, 2023.