EU Regulation 2023/1543, or the e-Evidence package, "represents a notable advancement in criminal justice in cyberspace," IAPP Westin Fellow Luke Fischer writes. Fischer analyzed the new regulation's impact on private entities that "will now be forced to receive, assess and respond to requests from foreign authorities through a new legal framework" that enters into force 18 Aug. 2026.Full story
U.S. Trade Representative Katherine Tai announced the withdrawal of prior World Trade Organization negotiation requests for free cross-border data flows for e-commerce data localization and source code review, Reuters reports. Tai said U.S. regulatory objectives should balance "the right to regulate in the public interest and the need to address anticompetitive behavior in the digital economy." Meanwhile, U.S.
The Court of Justice of the European Union opined that a patient has the right to a free first copy of their medical records under the EU General Data Protection Regulation. The question came before the court after a German resident asked his dentist for a copy of his medical records and was told he needed to pay for it. The case still has to be decided by the German Federal Court of Justice.Full story
The U.K. Online Safety Bill received royal assent 26 Oct. and is now law, The Verge reports. Now known as the Online Safety Act, it sets new obligations for how technology companies should "design, operate, and moderate their platforms." The U.K.
By focusing on the impacts to children's mental health in the lawsuit against Meta brought by 41 U.S. state attorneys general, IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, writes the legal strategy could prove to be an indirect way of addressing children's data privacy concerns.
U.S. Senate Majority Leader Chuck Schumer, D-N.Y., renewed a call for Congress to address artificial intelligence legislation, saying the White House's impending executive order on the subject was not a substitute for definitive action, The Washington Post reports. He said officials have estimated the federal government might need to invest USD32 billion to create safeguards around the technology.Full story
Provisions within India's Digital Personal Data Protection Act offer parallels and differences from various privacy laws around the world. Khaitan & Co. Partner Supratim Chakraborty, Associate Siddharth Sonkar, CIPP/E, and IAPP Legal Research Associate Alyanna Apacible compared the DPDPA against other frameworks, including an in-depth look at how India's law stacks up with the EU General Data Protection Regulation. Editor's note: This is the last in a six-part series on the operational impacts of India's DPDPA.
We know there is a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you.
The U.K. Parliament Science, Innovation and Technology Committee is seeking public comment on how to improve critical cybersecurity infrastructure. The call for insight comes after the U.K.'s Electoral Commission was hacked and voter data was exposed. Comments should be submitted by 10 Nov.Full story
Ashley Casovan has been working with governments on how to use artificial intelligence responsibly in their day-to-day functions. IAPP Staff Writer Caitlin Andrews talks with the new IAPP AI Governance Center Managing Director about what has changed in AI over the years and what is missing in discussions about the technology.Full story