EU & UK
- Italian data protection authority imposed a fine of EUR 5,000 on the Municipality of Syracuse, for violations of the General Data Protection Regulation.
- Polish data protection authority imposed an administrative fine of PLN 3.8 million on Morele.net Sp. z.o.o for General Data Protection Regulation violations.
- UK Government updated its guidance on ethics, transparency, and accountability framework for automated decision-making with the introduction of Government Digital and Data.
- Dutch data protection authority imposed a fine of EUR 10 million on Uber Technologies Inc., and Uber B.V. for violation of the General Data Protection Regulation following driver complaints.
AMERICAS
- Senate Bill 3281 for An act to amend the general business law, in relation to enacting the New York child data privacy and protection act was referred to the Internet and Technology Senate Committee.
- House Bill 5338 for a Consumer Data Protection Act was introduced to the West Virginia House of Representatives and thereafter referred to the House Finance Committee.
- Federal Trade Commission announced that it had filed a proposed order against Blackbaud, Inc. for data security failures under the Federal Trade Commission Act.
INDIA AND ASIA PACIFIC
- Thailand’s Ministry of Digital Economy and Society launched the Personal Data Protection Act Center to provide comprehensive personal data protection services, including receiving complaints and providing advice on personal data protection to citizens and various agencies.
- South Korea’s Personal Information Protection Commission published revised guidelines for the existing ‘Pseudonymous Information Processing Guidelines.’
- Data Security Council of India published a document containing frequently asked questions on the Digital Personal Data Protection Act, 2023.
- Oman’s Ministry of Transport, Communications, and Information Technology published Ministerial Resolution No. 2024/34 issuing the executive regulations for the Personal Data Protection Law.