Here are key highlights from February 2024 detailing global news and regulatory updates.
US & Canada
- California court of appeals rules that the state’s privacy regulator can begin enforcing the first set of California Privacy Rights Act (CPRA) regulations
- US Department of Commerce announces the creation of an AI safety consortium, bringing together a range of organizations in support of the development and deployment of safe and trustworthy AI
- US Electronic Privacy Information Center (EPIC) gives nearly half of the 14 state privacy laws a failing grade, claiming that the influence of tech companies on these laws is too strong
- US National Institute of Standards and Technology (NIST) research paper suggests the landmark Belmont Report could provide a solid foundation for ethical research in AI
- US NIST releases a cybersecurity resource guide for implementing the Health Insurance Portability and Accountability Act (HIPAA)
- US Department of Health and Human Services (HHS OCR) is planning a new round of HIPAA audits under an inactive program
EMEA
- African nation data protection laws and implementation efforts are examined in a new policy paper covering 35 countries
- EU countries vote unanimously to approve the Artificial Intelligence Act, leading the charge in shaping the future of AI governance in the region and globally, with a plenary vote in the European Parliament moved up to March 13
- EU European Commission will soon launch the European AI Office to support the development and use of trustworthy AI while protecting against AI risks
- EU European Parliament members approve a draft report with additional rules for enforcing the GDPR, aiming to further harmonize cross-border cooperation
- Nigeria’s Data Protection Commission provides guidance on requirements for data controllers and processors
- Poland’s data protection authority announces a sectoral inspection plan to ensure personal data processing safeguards
- Somalia establishes the Somali Data Protection Authority to uphold the privacy of its citizens
Gain confidence to use and share sensitive data
Find out how our advisory services can help you safely leverage data derived from information about people. Watch this 15-minute webinar.
APAC
- India’s Data Security Council releases an FAQ document on the Digital Personal Data Protection Act (DPDPA), including discussion of cross-border data transfers rules and enforcement mechanisms
- India’s government is working on a draft AI law designed to promote economic growth while addressing potential harms of AI
- Shanghai to relax rules for transferring data outside of China in an effort to spur economic improvements
- Southeast Asia’s Association of Southeast Asian Nations (ASEAN) publishes a guide on model contractual clauses between its members and the EU
- South Korea’s Personal Information Protection Committee (PIPC) revises its pseudonymized information processing guidelines for companies that use AI and releases a guide on pseudonymized information for the public sector