EU & UK
- The European Commission voted to adopt its adequacy decision for the EU-US Data Privacy Framework.
- UK’s Information Commissioner’s Office announced that the UK Home Office has concluded that Guernsey provides an adequate level of data protection for law enforcement processing.
- The Spanish data protection authority (AEPD) imposed a fine of EUR 70,000 on Vodafone Servicios S.L.U., for violations of the General Data Protection Regulation.
- AEPD published an updated guide on the use of cookies to align it with the Guidelines on deceptive design patterns issued by the European Data Protection Board in February 2023.
AMERICAS
- The U.S. International Trade Administration issued an advisory following the European Commission’s adequacy decision for the EU-US Data Privacy Framework.
- Senate Bill 162 on the Secure Online Child Interaction and Age Limitation Act was signed by the Governor of Louisiana and enters into effect on July 1, 2024.
- The U.S. Office of Privacy and Civil Liberties under the U.S. Department of Justice issued a statement on the European Commission’s adequacy decision for the EU-US Data Privacy Framework.
- Brazilian data protection authority announced that it has initiated studies to analyze the processing of personal data by Meta Platforms, Inc. via its recently launched social network, Threads.
ASIA PACIFIC
- The Saudi Data & Artificial Intelligence Authority released the draft Implementing Regulations of the Personal Data Protection Law, and the draft Regulation on Personal Data Transfer outside the Geographical Boundaries of the Kingdom, for public consultation.
- Australian Competition and Consumer Commission released an Issues Paper seeking views on data broker services in Australia.
- Hong Kong’s Privacy Commissioner for Personal Data issued new guidance on data breach handling and data breach notifications.