Issue 213

EU & UK

  • UK’s Information Commissioner’s Office published a guidance on content moderation and data protection.
  • Hellenic Data Protection Authority imposed a fine of EUR 25,000 on the Ministry of Rural Development and Food for violations of the General Data Protection Regulation.
  • Spanish data protection authority imposed a fine of EUR 50,000 on Oney Servicios Financieros E.F.C., S.A.U for violation of the General Data Protection Regulation.
  • Italian data protection authority fined a doctor EUR 20,000 for violating the General Data Protection Regulation.

AMERICAS

  • New York’s Senate Bill S06224 for an Act to amend the general business law, in relation to safeguarding abortion access through data privacy protection was referred to the Internet and Technology Committee.
  • The California Attorney General reached a settlement with DoorDash, Inc. for USD 375,000, in relation to allegations that the company violated the California Consumer Privacy Act and California Online Privacy Protection Act.
  • Utah’s Senate Bill 232 to amend the Protection of Personal Information Act passed its second reading, following its introduction to the Utah State Senate.
  • Colorado’s House Bill 24-1130 for an Act concerning protecting the privacy of an individual’s biometric data, was passed with amendments.

ASIA PACIFIC

  • Office of the Australian Information Commissioner published a report on the notifications received under the Notifiable Data Breaches scheme.
  • Hong Kong’s Office of the Privacy Commissioner for Personal conducted compliance checks on 28 organizations to understand their practices in relation to the processing of personal data in the development or use of artificial intelligence, as well as their AI governance structure.
  • Personal Information Protection Commission published a guide for providing pseudonymous information in the public sector.