The European Data Protection Board (EDPB) and the European Commission have issued their first-ever joint guidelines, clarifying how the Digital Markets Act (DMA) interacts with the General Data Protection Regulation (GDPR). The document aims to provide legal certainty and consistency for companies subject to both frameworks, particularly large online platforms designated as “gatekeepers.”
California Governor Gavin Newsom has signed into law the California Opt Me Out Act (AB 566), authored by Assemblymember Lowenthal and sponsored by the California Privacy Protection Agency (CPPA). The law cements California’s leadership in digital privacy by requiring all browsers operating in the state to include a built-in, one-click mechanism for users to opt out of data sales and sharing online.
California’s privacy watchdog has handed down its biggest penalty yet, hitting Tractor Supply Company with a $1.35 million fine and ordering sweeping reforms to its privacy practices after finding the retailer mishandled the data rights of consumers and job applicants.
Ireland’s Digital Regulators Group (DRG) has launched a Short Guide to Digital Regulation, a resource designed to help the public and businesses navigate the country’s complex web of digital oversight.
Malta’s financial watchdog is warning that progress on digital operational resilience, while encouraging, is still uneven across the sector. In a Dear CEO letter published this week, the Malta Financial Services Authority (MFSA) laid out the results of its 2024 supervisory reviews, calling for firms to push further in preparing for the EU’s Digital Operational Resilience Act (DORA).
Hackers have compromised a third-party supplier of Harrods, exposing 430,000 customer records with sensitive e-commerce information, the luxury retailer confirmed after reports first surfaced in major UK media outlets.
California has finalized a new set of privacy regulations that expand requirements for cybersecurity audits, risk assessments, and the use of automated decisionmaking technology (ADMT). The California Privacy Protection Agency (CPPA) confirmed on September 23 that the Office of Administrative Law has approved the rules, concluding years of debate and public input.