Gov. Gavin Newsom, D-Calif., recently signed two bills into California law that protect individuals' abortion data, Health IT Security reports. Bill AB 1242 prohibits state law enforcement entities and corporations from fulfilling search warrant requests from out-of-state law enforcement investigating anyone obtaining a lawful abortion in California.
Data privacy startup Securiti launched its data security cloud platform, DataControls Cloud, while it raised $75 million in Series C funding, TechCrunch reports. The data security cloud is intended to “provide a layer of data protection wherever the data lives,” which could be a major infrastructure provider like AWS or a software-as-a-service application like Salesforce.Full Story
Ireland's Data Protection Commission submitted a preliminary decision on Facebook's April 2021 data breach to members of the European Data Protection Board under Article 60 of the EU General Data Protection Regulation. The DPC began an immediate investigation following the breach involving more than 533 million individuals worldwide and 1.5 million Irish users.
China’s long-awaited Measures for Security Assessment of Outward Data Transfer went into effect Sept. 1, offering some form of clarity regarding entities operating in and outside of China. On the eve of the measures entering into force, the Cyberspace Administration of China released assessment guidelines for these entities to follow regarding conducting security assessments.
According to Husch Blackwell's "Byte Back," the Colorado attorney general's office released draft regulations for the Colorado Privacy Act. The draft rules include clarity around the definition of biometric information, responses to data subject requests, disclosure requirements for customer loyalty programs and privacy notice updates. The draft rules also add a category for sensitive data inferences.
The Ibero-American Data Protection Network, the RIPD, released guidance documents for implementing standard contractual clauses for international data transfers and transfer agreements. The guidelines aim to outline how and when SCCs should be used, as well as why the clauses are necessary and appropriate.
In this week’s global legislative roundup, the Indian government informed the Supreme Court of India the revised Personal Data Protection Bill would be tabled for the winter session of Parliament. The U.K. Information Commissioner’s Office issued public reprimands of public and private entities that failed to adequately respond to data subject access requests. Compromise amendments to the proposed EU Artificial Intelligence Act were introduced. And U.S. President Joe Biden is expected to sign an executive order on U.S.-EU data flows in the near future.
The U.S. Department of Justice announced the Data Access Agreement concerning criminal data sharing between the U.K. and the U.S. entered into force Oct. 3.
The Personal Data Protection Commission of Singapore issued a reminder that new amendments to the Personal Data Protection Act went into effect Oct. 1. The PDPC’s power has been “enhanced to accept voluntary undertakings” under its enforcement obligations.
Argentina's data protection authority, the Agency of Access to Public Information, extended the public consultation on proposed amendments to Law No. 25.326 on the Protection of Personal Data to Oct. 11. The extension is a response to calls from stakeholders seeking more time to submit comments.