EU & UK
- Spanish data protection authority imposed a fine of EUR 6.1 million on Endesa Energía, S.A.U, for violating the General Data Protection Regulation.
- French data protection authority imposed a fine of EUR 100,000 on De Particulier A Particulier for violation of the General Data Protection Regulation.
- UK’s Information Commissioner’s Office (ICO) published its response to the draft regulations to amend the immigration exemption under the Data Protection Act 2018.
- ICO published a blog post urging all app developers to ensure they are protecting users’ personal information, especially where sensitive information is involved.
AMERICAS
- New York Attorney General published an Assurance of Discontinuance, in which it reached a USD 750,000 settlement with the College Board, a non-profit institution, for unlawful sale of student personal data.
- USAs Federal Trade Commission published a blog regarding the changing by companies of their Terms of Service and privacy policies so that they are no longer restricted in the ways they can use their customers’ data.
- US Senators introduced the Strengthening Cybersecurity in Health Care Act.
- US Department of Health and Human Services Office for Civil Rights announced that it had reached a USD 4.75 million settlement with Montefiore Medical Center, a non-profit hospital system, for several potential violations of the Health Insurance Portability and Accountability Act Security Rules relating to data security failures.
ASIA PACIFIC
- Office of the Privacy Commissioner of New Zealand announced an investigation into Foodstuffs North Island’s trial of its use of facial recognition technology.
- Office of the Privacy Commissioner of New Zealand published a Privacy Impact Assessment toolkit to provide guidance to organizations on whether a PIA is required and the step-by-step templates and tools needed to conduct a PIA.
- Spain’s National Institute of Cybersecurity signed a collaboration agreement with Japanese CERT to address emerging cybersecurity challenges, strengthening the digital defenses of both countries.