Top News – CPPA’s revised draft for cybersecurity audit regulations, EU adopts Data Act, and more

Federal judge rules against allegations of Washinton’s Privacy Laws violations

The federal judge from Seattle-based appellate ruled against bringing back a class action lawsuit against four automakers Honda, Volkswagen, Toyota, and General Motors alleging that they have violated the privacy laws of Washinton state. The lawsuit alleged that these companies used vehicles’ on-board infotainment systems to intercept their customers’ call logs and text messages. The judge ruled on Tuesday that these practices did not meet the threshold for violating the standards of Washington’s privacy law. Read more

CPPA publishes a revised draft of CPRA’s regulations for cybersecurity audits

California Privacy Protection Agency board, CPPA released a revised draft of the CPRA (California Privacy Rights Act) regulations for cybersecurity audits. This draft is a revision of the initial draft released in August and comes ahead of an open discussion to be held in December. The rule making process for either of these drafts hasn’t commenced yet. Read more

TikTok agrees to children’s privacy restrictions in Vietnam

TikTok Singapore, which directly manages TikTok in Vietnam and the Vietnamese Government agreed to the new children’s privacy restrictions imposed on the platform. Deleting the accounts and videos of users under 13 years of age was a part of these restrictions. The company sent a written commitment to the authorities that also included a one-hour time limit for users under 18 to reduce the time spent on the platform. Another commitment was to obtain consent from parents or guardians before posting a video or a picture on the platform. Read more

Data Act formally adopted in the EU

Proposed in February 2022, the Data Act was formally adopted following the European Parliament’s vote on Thursday. This regulation is a part of the EU Data Strategy package and becomes the latest one to be adopted. The Act, alongside the Data Governance Act in force, was intended to support a single market for data. Data Act has a 20-month transition period which would set in after the text gets published in the Office Journal. Read more

Political parties in Netherlands found placing tracking cookies

Research by the Dutch Broadcasting Foundation finds that several political parties in Netherlands were violating cookie law by placing tracking cookies in different websites. Since 2012, placing tracking cookies was only allowed when the users give consent to it, and four political parties violated this rule by placing marketing cookies before giving the consent. Read more