Issue 187

EU

The European Data Protection Board adopted an information note about the implications of the EU-US Data Privacy Framework and a statement on the first review of the Japan adequacy decision.
Italian data protection authority imposed a fine of EUR 10,000 on Camedi S.R.L., a medical center, for violations of the General Data Protection Regulation (GDPR).
The Spanish data protection authority imposed a fine of EUR 60,000 on Birou Gas, S.L, for violations of the GDPR.
The Danish data protection authority announced that it had expanded its existing guidance on the right to erasure in regard to search engines.

The Federal Trade Commission announced that it had published a Federal Register notice seeking public comment on a new mechanism for obtaining parental consent under the Children’s Online Privacy Protection Act.
Senate Bill 619 for an Act relating to protections for the personal data of consumers was signed into law by the Governor of Oregon.
House Bill 6941 for an act concerning the state budget, containing amendments to the Connecticut Act concerning Online Privacy, Data and Safety Protections, became law after being signed by the Governor of Connecticut.

Japan’s data watchdog issued administrative guidance to Toyota Motor Corporation regarding its handling of personal information, in line with the Act on the Protection of Personal Information.
Singapore’s Personal Data Protection Commission launched a public consultation on the Proposed Advisory Guidelines on the Personal Data Protection Act for Children’s Personal Data (Proposed Guidelines).
Thailand’s Personal Data Protection Committee launched a public consultation on a draft decree on the appointment of data protection officers by data controllers and processors under the Personal Data Protection Act 2019.
Philippines’’ National Privacy Commission reminded all covered personal information controller and personal information processors regarding the mandatory registration of their data protection officers and data processing systems.