Articles from Around the Web

Kenya created a requirement for startups that process personal data to register with the Office of the Data Protection Commissioner, PYMNTS.com reports. While Kenya’s Data Protection Act is the EU General Data Protection Regulation’s closest parallel on the African continent, a potential bilateral trade deal with the U.S. could save American companies compliance headaches after the EU-U.S. Privacy Shield was overturned in 2020. However, provisions of the anticipated Kenya-U.S.

The U.S. Department of Health and Human Services Office for Civil Rights fined New England Dermatology and Laser Center $300,640 for violating the Health Insurance Portability and Accountability Act Privacy Rule. The health center was found to have improperly deleted protected health information when it threw out specimen containers with labels carrying patient names, birthdates, dates of sample collection and name of the provider who took the specimen.

Austrian consumer advocacy group NOYB filed a complaint to France’s data protection authority, the Commission nationale de l'informatique et des libertés, over Google allegedly violating an EU court order, Reuters reports. The complaint alleged Google sent unsolicited advertising emails directly to its European Gmail users. If the CNIL were to rule against Google, the decision would only apply to French Gmail users; however, such a ruling could force Google to reevaluate its practices across the EU.

Two years removed from the Court of Justice of the European Union’s invalidation of Privacy Shield, a legal framework for lawful EU-U.S. data transfers is still in the works. While negotiations move forward, discussions are happening among EU policymakers about a potential shift toward data localization to help preserve digital sovereignty. Journalist Luca Bertuzzi reports on the reasons behind the data localization push.Full Story