Ireland Data Protection Commission Launches Two Inquiries into Tiktok Concerning Compliance with GDPR Requirements
The Ireland Data Protection Commission (DPC) has on 14th September 2021 commenced two own-volition inquiries pursuant to section 110 of the Data Protection Act 2018 in relation to TikTok Technology Limited’s (TikTok) compliance with GDPR requirements relating to the processing of children’s personal data and transfers of data to China.
Saudi Arabia Approves Law to Protect Personal Data
The Saudi Arabian Data & AI Authority ('SDAIA') announced, on 14 September 2021 that the Saudi Council of Ministers has approved the Personal Data Protection Law, which will take effect on March 13, 2022. The law aims to ensure the privacy of personal data, regulate the sharing of personal data, and prevent the abuse of personal data.
France's Data Protection Authority, CNIL Announced the Results of Its Second Round of Cookie Compliance Notices
On July 19, 2021, the president of the French Data Protection Authority, The Commission Nationale De L’informatique Et des Libertés (CNIL) gave formal notice to a few organizations publishing high-traffic sites and having practices contrary to the legislation on cookies. The CNIL has noted that 30 organizations have become compliant, four have requested a delay due to technical or operational constraints and four have not yet responded.
India: Joint Parliamentary Committee Continues Deliberations on Personal Data Protection Bill
The Joint Parliamentary Committee ('JPC') held meetings on 15th and 16th September 2021 to discuss and finalize the suggestions for amendment in the Personal Data Protection Bill 2019 by the Chairperson, Joint Committee. The JPC notified that it will be holding further meetings to deliberate on the Personal Data Protection Bill, 2019, having sought an extension for the submission of its report in July 2021.
Amazon Announces Compliance with EU's Updated Standard Contractual Clauses (SCCs)
Amazon on 16th September 2021 has announced that the online AWS GDPR Data Processing Addendum (AWS GDPR DPA) and online Service Terms have been revised to include the new Standard Contractual Clauses (SCCs) that the European Commission (EC) adopted in June 2021.
The State of Colorado Officially Enacted the Colorado Privacy Act
Colorado has now joined California and Virginia to become the third US state to pass a comprehensive data privacy legislation when Governor Jared Polis signed the Colorado Privacy Act (the “CPA”) into law on July 8, 2021. The new law is set to take effect on July 1, 2023.