The Personal Information Protection Commission has opened a public consultation on an overhaul of the country’s privacy protection framework, a review prompted in part by the widening distance between rules built around consent and forms of data processing that have become considerably harder to explain, much less reduce to a series of yes-or-no decisions.
The Australian Competition and Consumer Commission filed proceedings in the Federal Court on Friday against Subaru, accusing the company of breaching Australia’s Motor Vehicle Service and Repair Information Sharing Scheme, or MVIS.
New Zealand’s Parliament has passed legislation barring civil tort claims over climate-change effects arising from greenhouse gas emissions, closing a potential avenue of liability for companies and other emitters.
Pokémon Center is notifying customers in the United Kingdom and Germany that personal and order information may have been exposed in a cyberattack on CEVA Logistics, the third-party provider it uses to fulfill and ship orders in those markets.
For a long time, deleting data could feel strangely reckless. Storage was cheap, and information was potentially valuable. The cost of keeping another year of customer records, internal correspondence, transaction histories or old documents was difficult to see, while the cost of deleting the wrong thing was easy to imagine. So companies kept it. Some of it was retained for legal or operational reasons, some because nobody was quite sure whether it could safely be destroyed, and some because of the most durable retention policy in corporate life: we might need it someday.
Poland’s consumer protection authority has opened proceedings against parcel-shipping platform Furgonetka over contract terms that allow additional charges to be imposed after delivery and require consumers to pursue complaints through carriers with which they have no contract.
The Malta Financial Services Authority worked through 943 potential enforcement cases in 2025. Ninety-one ended in enforcement actions and administrative penalties totaling €570,673, but the clearest pattern in the regulator’s year was not buried in its more complicated investigations. It was there in the calendar.