JANUARY 2026 ISSUE NO. 295
|
|
|
|
|
|
EU
- Data
Protection Authorities of UK,
Jersey, Guernsey and Isle of Man launched a joint
investigation into a cybersecurity incident involving a trade
union.
- The UK Govt, Financial
Authority and ICO issued a policy note clarifying lawful
use of personal data for targeted support and direct marketing.
- France’s CNIL fined a
software company EUR 1,700,000 for failure to
implement adequate security measures.
- Italian
Data Protection Authority published a request for
rectification of personal data form in Schengen Information
System.
- European Commission released the first draft
of Code of Practice on marking and labelling of AI-generated
content.
- Belgian Data
Protection Authority extended the applicability
of GDPR to unborn children.
- Dutch data watchdog fined a university EUR 175,000
for failure to protect students and employee’s personal
data.
- Spanish
Agency for the Supervision of Artificial Intelligence published practical guides to
help
organisations comply with the EU AI Act.
- Norway’s
Financial Supervisory Authority published information on
Digital Security Act, the related regulations and NIS
directive.
- Liechtenstein’s Data
Protection Office updated its guidance on use
of cookies and similar technologies.
|
|
|
|
Americas
- Bill
for Auto Data Privacy and Autonomy Act was introduced in
the US Senate.
- Federal Trade Commission took enforcement action against blockchain company for data
breach resulting from ineffective data security
measures.
- A
coalition of 42 US state AG urged major tech companies
to implement safeguards to protect users from harmful AI chatbot
interactions.
- The
Texas Attorney General secured a restraining
order against smart TV company for unlawful collection
of personal data through automation.
- Attorney
General of Florida sued online game
platform for misrepresenting its child safety measures.
- Lawsuit filed
in Illinois against AI notetaking platform for illegal biometric
data collection from virtual meetings and for failing to
maintain data retention policies.
- California’s Privacy Protection
Agency published a blog on Delete Request
and Opt-Out Platform (DROP).
|
|
|
|
APAC
- Artificial
Intelligence (Ethics and Accountability) bill introduced in the
Indian Parliament.
- China’s
technical committee launched consultation on draft national
standard for cryptographic
devices used in network security technology.
- South
Korea’s Internet and Security Agency published a guide
on AI security.
- National AI Centre,
Australia published a guidance to help
users identify AI-generated content.
- Hong
Kong’s Privacy Commissioner published guidelines addressing the
misuse of AI-powered deepfakes.
|
|
|
|
Click here to read the complete newsletter with official links
|
|
|
|
Gurugram office: 1st Floor, AIHP Palms, 242 & 243, Udyog Vihar Phase-IV, Gurugram - 122015 Dubai office: Unit: 9, 9th Floor, Arabian Sky Business Centre, CitiBank Building, Sheikh Rashid Road, Dubai, UAE Phone: +91-124-4309062 | Email: newsletter@Privacydesk.in Delhi (NCR) | Dubai
|
|
|
|
|
|
Disclaimer: This update is the copyright of Reina Legal. The update is not intended to be a form of solicitation or advertising. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate thereafter. No person should act on such information without appropriate professional advice based on the circumstances of a particular situation. Unsubscribe
|
|