Here are key highlights from September 2022 detailing global news and regulatory updates.
Global
- G-7 privacy regulators met to talk about international data flows—including discussion of data anonymization techniques—and issue post-meeting communiqué
US & Canada
- US White House hosts discussions on Big Tech harms and brings privacy once again to the forefront
- US President Biden issues presidential directive to the Committee on Foreign Investment, instructing the Committee to consider businesses with access to sensitive data
EMEA
- Andorra’s Data Protection Agency announces government-approved decrees to better adapt the country’s law to the GDPR
- EU’s planned Data Act and the GDPR do not interact well, claim data protection officers
- EU’s European Commission publishes the Cyber Resilience Act, a proposed regulation to reduce vulnerabilities in hardware and software products
- EU’s main data protection authorities are “deeply concerned” that their budget will be too small to enforce data protection rights
- EU’s health data space and what it means for pharmaceutical companies, as explained by a Partner from Pinsent Masons
- France’s Council of State recommends that the Commission nationale de l’informatique et des libertés (CNIL), France’s data protection authority, become the national authority for the control of AI systems
- France’s data protection authority CNIL imposes fine of €250,000 for—among other violations—insufficient anonymization of personal data
- Rwanda’s National Cyber Security Authority publishes guidance on how data subjects can exercise their right to object
- Tanzania’s Data Protection Bill to be tabled and signed into law
- UK’s Information Commissioner’s Office (ICO) publishes guidance on privacy enhancing technologies—part 5 of its guidance on anonymization
- UK government provides 12 guidelines for secure data environments and arranges them according to the Five Safes
Gain confidence to use and share sensitive data
Find out how our advisory services can help you safely leverage data derived from information about people. Watch this 15-minute webinar.
APAC
- Australian government looks to overhaul privacy laws after record-breaking hack
- China’s new cross-border data transfer security assessment guidelines, as explained by a Partner from PwC China.
- Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) releases a guidance note on data security measures for information and communications technology
- India’s government removes draft anonymisation rules from website a week after requesting public feedback
- Indonesian parliament passes the long-awaited personal data protection law
- Taiwanese court declares secondary use of medical records unconstitutional
LATAM
- Colombia’s government issues instructions regarding its binding corporate rules, addressing the transfer of data outside the country