The European Union has set a global precedent once again. With the AI Act, it has established the world’s first comprehensive legal framework for artificial intelligence. Much like GDPR did for data privacy, the AI Act is designed not only…
Peru’s data protection authority (ANPD) has sharpened its stance on proportionality in data use. Companies can no longer rely on practices like photographing customer ID cards during product delivery — deemed excessive and unnecessary under Peru’s Personal Data Protection Law…
China’s public security authority announced that Dior’s Shanghai branch committed serious violations of China’s data protection laws by transferring Chinese customer data to its headquarters in France without mandatory legal safeguards. Background The issue traces back to a breach in…
On 18 July 2025, Uganda’s Personal Data Protection Office (PDPO) ruled in Ssekamwa Frank & 3 others v. Google LLC that Uganda’s data protection compliance obligations apply to any entity—anywhere in the world—that handles the personal data of Ugandan citizens…
Jurisdiction: Dubai, United Arab Emirates Issued: 8 July 2025 | In Force: 15 July 2025 Law Reference: DIFC Laws Amendment Law No. 1 of 2025 Key Developments 1. Private Right of Action Introduced • Data subjects can now sue controllers or processors…
The California Privacy Protection Agency (CPPA) has adopted sweeping updates to the CCPA regulations(effective July 24, 2025). These are NOT cosmetic changes. They redefine how organizations must handle automated decision-making, cybersecurity audits, and risk assessments. Here’s what you need to know: • Automated Decision-Making Technology (ADMT) —…
On June 19th, the UK’s Data (Use and Access) Act 2025 officially became law—ushering in a comprehensive, risk-focused approach to how data is accessed, used, and governed across industries. This legislation is more than compliance; it’s a strategic shift towards operational…
On June 26, 2025, Vietnam’s National Assembly adopted its first unified Personal Data Protection Law (PDPL)—a sweeping legislative move that reshapes how both local and foreign organizations handle data related to Vietnamese citizens. The law takes effect on January 1, 2026,…
Brazil is making history with its launch of dWallet—a groundbreaking digital data wallet pilot that marks a new front in data sovereignty. For the first time, citizens can not only control their personal data but also earn from it. A step beyond privacy,…
France’s Competition Authority (Autorité de la Concurrence) has imposed a €150 million fine on Apple for restricting third-party apps and advertisers from collecting user personal data through its implementation of the App Tracking Transparency (ATT) framework. The ATT framework, a privacy…
