Issue 198

EU

  • Belgian data protection authority released a checklist to help organizations align their cookie practices with current regulations.
  • The Court of Justice of the European Union held in a judgement that a medical patient has the right to obtain a copy of medical records free of charge regardless of the reasons for such request.
  • The European Data Protection Supervisor published its final recommendations for the Proposal for a Regulation of the European Parliament on Artificial Intelligence Act.
  • the Italian data protection authority imposed a fine of EUR 75,000 and a corrective order on Università e-Campus, for violations of the General Data Protection Regulation and the Personal Data Protection Code.

AMERICAS

  • New York State Attorney General along with 32 other Attorney Generals filed a federal lawsuit against Meta Platforms, Inc. for collecting personal data of children under the age of thirteen without obtaining parental consent.
  • U.S. Department of Health and Human Services’ Office for Civil Rights published a guidance entitled ‘How Sanction Policies Can Support HIPAA Compliance.’ 
  • Canada’s Minister of Innovation, Science, and Industry released draft motions to amend Bill C-27 for the Digital Charter Implementation Act 2022.
  • Canada’s Office of the Privacy Commissioner published new research on impact of artificial intelligence on privacy.

ASIA PACIFIC

  • The Ministry of Industry and Information Technology of the People’s Republic of China published a notice of its sixth batch of notifications to apps on violations of users’ rights in 2023.
  • Australian Communications and Media Authority announced that Uber Australia Pty Ltd paid an infringement notice of AUD 412,500 for violations of the Spam Act 2003.
  • NTT Marketing Act ProCX – a call center operator based in Osaka, Japan, announced that a former temporary employee, while working with NTT Business Solutions, illegally accessed and leaked customer data to a third party. 
  • The Monetary Authority of Singapore and Infocomm Media Development Authority requested public comments on a Shared Responsibility Framework for phishing scams.