July 2023

Data Privacy Frontline Report

July 2023

Here are key highlights from July 2023 detailing global news and regulatory updates.

US & Canada

  • US Federal Trade Commission (FTC) provides key takeaways from recent cases, including those involving BetterHelp, GoodRx, Premom, and Vitagene
  • US FTC identifies algorithm disgorgement—or model deletion—as a significant part of the agency’s AI enforcement strategy

EMEA

  • EU and UK data authorities are cautiously positive about the potential of synthetic data while recognizing potential privacy risks
  • EU’s European Commission adopts the EU-US adequacy decision, but the new framework is already poised to face a legal challenge in the EU
  • EU’s European Data Protection Board (EDPB) issued its formal statement on the European Commission’s first review of its adequacy agreement with Japan, finding no changes in Japanese legislation running counter to the GDPR
  • EU’s European Medicines Agency (EMA) finalizes guidance on safeguarding personal protected data (PPD) and commercially confidential information (CCI) in clinical trial filings in the European Economic Area
  • Saudia Arabia’s government publishes draft guidelines on the transfer of personal data outside the Kingdom of Saudi Arabia (in Arabic)
  • UK privacy campaigners call for EU data adequacy to be revoked if the UK government’s upcoming data bill passes

Gain confidence to use and share sensitive data

Find out how our advisory services can help you safely leverage data derived from information about people. Watch this 15-minute webinar.

APAC

  • Indonesia’s Communications and Informatics Ministry to draft a regulation for an independent institution to report on data leaks and report results directly to the President
  • Sri Lanka’s Data Protection Authority comes into operation, an independent body engaging with a range of sectoral regulators
  • Thailand’s Office of the Personal Data Protection Commission announced a public hearing to formalize the responsibilities of data controllers and processors under the Personal Data Protection Act

LATAM

  • Argentina’s national executive branch presents the Personal Data Protection Bill to Congress (in Spanish)
  • Guatemala’s draft data protection law receives a favorable opinion from the Transparency and Probity Commission and now returns to Congress for debate