The Cyberspace Administration of China's Cyberspace Law and Administration Bureau is seeking public feedback on proposed amendments to the draft Cybersecurity Law. The amendments include establishing liability provisions for operators that fail to meet security requirements or those selling uncertified security equipment. The public comment deadline is 27 April.Full story
A final decision on possible enforcement action against TikTok from Ireland's Data Protection Commission is "imminent" after no EU member state's data protection authority objected during the consultation process, the Irish Independent reports. The investigation began in 2021 following complaints TikTok was transferring EU citizens' personal data to China.
Former Democratic U.S. Federal Trade Commissioners Rebecca Kelly Slaughter and Alvaro Bedoya filed a federal lawsuit challenging their removal from the agency, alleging the expulsion was illegal and without cause, The New York Times reports. Meanwhile, in an interview with the Tech Policy Press, Bedoya said his termination notice did not cite any justification for his firing.
Privacy and information policy consultant Robert Gellman opined on potential compromises on preemption and private rights of action in any future U.S. comprehensive federal privacy law. The two issues are often cited as barriers to passing a comprehensive legislation, but Gellman argues allowing higher thresholds for lawsuits and allowing states to enact stronger standards after a time period can overcome them.Full story
France's data protection authority, the Commission nationale de l'informatique et des libertés, offered advice on how users can request their data be deleted from 23andMe and discussed concerns about the company's bankruptcy status.Full story
South Korea's Personal Information Protection Commission issued a KRW13.451 billion fine to financial services company Woori Card after the company allegedly violated the Personal Information Protection Act by using affiliate store owners' personal information for marketing purposes without consent.
The Cyberspace Administration of China, the Ministry of Industry and Information Technology, the Ministry of Public Security, and the State Administration for Market Regulation announced plans for 2025 probes into various data collection practices. The agencies will look into collection practices concerning mobile apps, software development kits, public facial recognition technology and smart terminals.Full story
TransUnion published its 2025 State of Omnichannel Fraud Report, which identifies a shift in identity thieves' strategies to focus on "high-success, short-term payoffs" schemes, according to its executive summary. The report found a 34% increase in U.S. data breach severity from 2023 to 2024, but a 45% decrease in breach volume.
Taiwan's Executive Yuan approved the draft Organization Act of the Personal Data Protection Commission as well as draft amendments to the Personal Data Protection Act. The Organization Act outlines 11 measures clarifying the organizational structure of the PDPC.
The Czech Republic's data protection authority, Úřad pro ochranu osobních údajů, met with Austria's Data Protection Authority to discuss enforcement efforts and personal data protection with the development of AI technology. Austria's DPA Commissioner Matthias Schmidl said the "increase in personal data processing requires effective cross-border cooperation.