Hello Friends,
Parliament’s monsoon session is likely to begin on July 17 and The Cabinet is expected to take up the Digital Personal Data Protection Bill, 2022 and once it gets the approval, the Bill will be tabled in the upcoming Parliament session.
Enjoy reading!
Privacy Enforcement
South Korea’s PIPC fines 3 Businesses for Mishandling Personal Information
South Korea’s Personal Information Protection Commission fined three business operators more than 1.23 billion won for violating of the Personal Information Protection Act. Additionally, the three businesses were each fined for failure to impose safety measures that would have protected users' personal information.
CNIL fines Criteo 40M Euros over Data Processing Consent Violations
France's data protection authority, the Commission nationale de l'informatique et des libertes, fined online advertising company Criteo 40 million euros for alleged EU General Data Protection Regulation violations. The CNIL said Criteo did not verify individuals' consent for data processing while violating principles for information and transparency, right of access, and data erasure. Privacy rights group NOYB data protection lawyer Romain Robert said the decision is a strong signal to the ad-tech industry that they will face dire consequences for violations.
Privacy in Spotlight
WhatsApp launches new Privacy Features
Meta announced two new privacy features for its encrypted chat platform, WhatsApp. The features are called "Silence Unknown Callers" and "Privacy Checkup." The ability to silence unknown calls helps to automatically screen out spam, scams, and calls from unknown people and will not cause the phone to ring but will appear in a user's call list. Privacy Checkup guides users through all of the WhatsApp privacy settings, which include recently added tools, such as Chat Lock and disappearing messages.
G7 Authorities note Privacy, Data Protection concerns of generative AI
A draft statement by the data protection and privacy authorities of G7 countries recognizes risks and potential harms to privacy, data protection, and other fundamental human rights without the proper development and regulation of generative artificial intelligence. Concerns include legal standing to process personal information and data sets used to train AI models. The statement calls on generative AI providers to implement measures ensuring individuals can access, rectify and erase personal information.
Regulations
Cabinet Likely to approve Digital Personal Data Protection Bill
Personal Data Protection Bill, 2022 will be on Parliament's monsoon session agenda. The bill was reintroduced in November 2022 after it was first withdrawn in August. The draft of the Digital Personal Data Protection Bill 2022 is likely to get approval from the Union Cabinet on 5 July.
Oregon set to finalize Comprehensive Privacy Bill
Oregon SB 619, an act relating to protections for the personal data of consumers, received final approval from the Oregon State Legislature on 22 June after a 54-0 House vote to pass. The comprehensive privacy bill covers entities that control or process personal data on 100,000 consumers or derive 50% of revenue from selling the data of more than 25,000 consumers. It contains unique definitions for biometric and personal data, required data protection assessments, and a 30-day right to cure that sunsets 1 Jan. 2026. Pending action from the governor, SB 619 takes effect on 1 July 2024.
MeitY focused on Government Privacy, Security
Ministry of Electronics and Information Technology Secretary Alkesh Kumar Sharma said India's government is committed to improving data privacy and security in the wake of recent data breaches. He called both major issues worthy of increased focus, noting it is essential to acknowledge the digital transformation and the challenges it poses.