Israel's Privacy Protection Authority announced it will require information management and data storage service providers to submit information on data security measures under the Privacy Protection Law. The PPA indicated data security safeguards must confirm compliance to reduce the risk of a data breach. Additionally, the regulator issued "immediate actions that companies must perform" to address any lack of security measures.Full story
Jamaica's Data Protection Act took effect 1 Dec. The Office of the Information Commissioner announced a six-month grace period for data controllers to register with the office to confirm compliance.
The Court of Justice of the European Union reaffirmed the conditions data protection authorities can issue fines to data controllers under the EU General Data Protection Regulation.
The U.S. House Committee on the Judiciary will hold a 6 Dec. markup session on a bill to renew Section 702 of the Foreign Intelligence Surveillance Act. The Protect Liberty and End Warrantless Surveillance Act would impose search warrant requirements for intelligence and law enforcement to review citizens' electronic communications and enact tighter restrictions for purchasing communications data from third parties.
The U.K. Information Commissioner's Office posted a blog discussing how sufficient data protection can support the housing sector. The post covered common data protection issues in the sector, including inappropriate data disclosures, inaccurate record keeping and noncompliant data sharing activities.
TechCrunch reports genetic testing company 23andMe's October data breach swept up 6.9 million individuals after the company initially reported approximately 14,000 individuals were affected.
George Washington University Law School announced the creation of its Center for Law and Technology.
The New York State Department of Financial Services announced a USD1 million cybersecurity settlement with First American Title Insurance Company for violating cybersecurity regulation 23 NYCRR Part 500.
The California Privacy Protection Agency published proposed revisions to existing California Consumer Privacy Act regulations that will be discussed at its 8 Dec. board meeting. The proposed updates could increase applicability thresholds and potential fines while updating provisions on dark patterns and obligations around data subject rights.
Meta is facing a lawsuit in Spain brought by an association of more than 80 newspapers alleging "systematic and massive non-compliance" with the EU General Data Protection Regulation, TechCrunch reports. The association, AMI, seeks 550 million euros in damages because Meta allegedly did not establish a legal basis for processing users' data for several years, which constituted a breach of competition rules.Full story