Irish DPC fines Meta €1.2 billion over data transfers
22 May 2023
Ireland’s Data Protection Commission fines Meta a record €1.2 billion over transfers of Facebook user data to the US.
Changes to laws and regulations affecting information security, privacy, AI and resilience.
Ireland’s Data Protection Commission fines Meta a record €1.2 billion over transfers of Facebook user data to the US.
Tanzania’s Personal Data Protection Act 2022 comes into force, establishing a Personal Data Protection Commission and registration requirements.
Italy’s data protection authority orders a temporary restriction on ChatGPT’s processing of Italian users’ data.
Manufacturers seeking FDA clearance for connected medical devices must now include SBOMs and vulnerability management plans in submissions.
Oman’s Personal Data Protection Law, issued by Royal Decree 6/2022, comes into force one year after publication.
Three major EU laws on cyber security and resilience enter into force: the NIS2 Directive, DORA and the Critical Entities Resilience Directive.
Virginia’s comprehensive privacy law takes effect, bringing GDPR-style controller and processor obligations to another US state.
The US health regulator has issued guidance that tracking pixels and similar tools on healthcare websites and apps may disclose protected health information.
The first agreement under the US CLOUD Act allows UK and US authorities to request data directly from each other’s service providers.
Florida now prohibits state agencies, counties and municipalities from paying ransoms and sets tight deadlines for reporting cyber incidents.
Brazil’s ANEEL Normative Resolution 964/2021 now requires electricity sector agents to maintain cyber security policies and report incidents.
Thailand’s Personal Data Protection Act 2019 comes fully into force after repeated postponements.