On April 4, 2023, the data protection regulator of the UK, the Information Commissioner’s Office, issued a fine of a £12.7 million to TikTok Information Technologies UK Limited and TikTok Inc for a number of breaches of UK data protection law, including failing to use children’s personal data lawfully.
Continue Reading The UK Data Protection Regulator Fines TikTok £12.7 Million
Personal Data
CIPL Submits Response to CPPA Invitation for Preliminary Comments on Proposed Rulemaking
On Monday, March 27,, 2023, the Centre for Information Policy Leadership at Hunton Andrews Kurth submitted a response to the California Privacy Protection Agency Invitation for Preliminary Comments on Proposed Rulemaking Cybersecurity Audits, Risk Assessments, and Automated Decisionmaking. …
Continue Reading CIPL Submits Response to CPPA Invitation for Preliminary Comments on Proposed Rulemaking
Iowa House and Senate Unanimously Vote to Approve Comprehensive Privacy Legislation
On March 6 and 15, 2023, both chambers of the Iowa Legislature unanimously voted to approve Senate File 262, which could make Iowa the sixth U.S. state to enact comprehensive privacy legislation.
Continue Reading Iowa House and Senate Unanimously Vote to Approve Comprehensive Privacy Legislation
UK ICO Issues Updated Guidance on AI and Data Protection
On March 15, 2023, the UK Information Commissioner’s Office published an updated version of its guidance on AI and data protection, following requests from UK industry to clarify requirements for fairness in AI. …
Continue Reading UK ICO Issues Updated Guidance on AI and Data Protection
UK Introduces Data Protection and Digital Information (No. 2) Bill
On March 8, 2023, the UK Secretary of State for Science, Innovation and Technology, Michelle Donelan, introduced the Data Protection and Digital Information (No. 2) Bill to UK Parliament.
Continue Reading UK Introduces Data Protection and Digital Information (No. 2) Bill
Irish Data Protection Commission Publishes Annual Report for 2022
On March 7, 2023, the Irish Data Protection Commission published its Annual Report for 2022. …
Continue Reading Irish Data Protection Commission Publishes Annual Report for 2022
FTC Announces Proposed Order against BetterHelp for Disclosing Sensitive Mental Health Information to Third Parties for Targeted Advertising Purposes
On March 2, 2023, the FTC announced a proposed order against BetterHelp, Inc., an online mental health counseling service, for sharing consumer data, including sensitive mental health information, with third parties for targeted advertising and other purposes. …
Continue Reading FTC Announces Proposed Order against BetterHelp for Disclosing Sensitive Mental Health Information to Third Parties for Targeted Advertising Purposes
Bill to Amend the Gramm-Leach-Bliley Act Introduced to Congress
On February 24, 2023, Representative Patrick T. McHenry of North Carolina introduced a bill proposing the creation of the Data Privacy Act of 2023. …
Continue Reading Bill to Amend the Gramm-Leach-Bliley Act Introduced to Congress
White House Releases National Cybersecurity Strategy
On March 2, 2023, the Biden-Harris Administration announced the release of the National Cybersecurity Strategy.
Continue Reading White House Releases National Cybersecurity Strategy
Revised Colorado Privacy Act Rules Adopted for Review by Colorado AG
On February 28, 2023, the Colorado Office of the Attorney General announced that revised draft Colorado Privacy Act rules were adopted for review by the Colorado Attorney General prior to finalization and publication in the Colorado Register. …
Continue Reading Revised Colorado Privacy Act Rules Adopted for Review by Colorado AG