New U.S. Treasury Sanctions Aim to Counter Cryptocurrency Ransomware Payments

The U.S. Department of Treasury announced it will begin imposing sanctions, including fines and other penalties, on platforms that facilitate digital payments to hackers. The sanctions are intended to block this channel of payment in an attempt to eradicate the use of digital payments in ransomware attacks and other illicit activities which have become increasingly common in recent years. This ...

South Korea: Facebook and Netflix Fined for Privacy Infringements

Following comprehensive investigations, the South Korean privacy regulator, the Personal Information Protection Commission (PIPC), has fined Facebook and Netflix for infringing several provisions of the Korean Personal Information Protection Act (PIPA).

The PIPC fined Facebook about US $5.6 million for six violations of the PIPA, the key one being the collection of facial recognition data without the users’ consent. For ...

Israeli Privacy Protection Authority Seeks to Limit Employee Geolocation Monitoring

The Israeli Privacy Protection Authority (PPA) published for public comments a draft opinion on the collection of employees’ geolocation data through dedicated apps and vehicle geolocation systems. The opinion comes in response to the rising use of technology tools to monitor and track employees who work remotely.

According to the PPA, the practice of tracking employees is common mainly in ...

China Enacts New Personal Information Protection Law

China’s National People's Congress enacted a new law, the Personal Information Protection Law (PIPL), designed to protect individuals’ personal information online. It will be effective as of November 1, 2021, and is expected to add a long list of regulatory compliance requirements to companies operating in China.

The law requires that personal information will only be processed for a clear ...

The Israeli Privacy Protection Authority Objects to Police Use of Facial Recognition Technology

In a comprehensive opinion published in response to a governmental draft bill for amending the Police Ordinance (Special Photographic Systems), 5781-2021, the Israeli Privacy Protection Authority (PPA) disapproved the police’s use of facial recognition technologies.

The PPA stated that not only might permanent and systematic monitoring of individuals’ movement lead to the misuse of sensitive personal information, it might also ...

Brazil: Sanctions under the Data Protection Law Take Effect

The final component of Brazil’s Lei Geral de Proteção de Dados (LGPD) – the administrative sanctions piece – became effective at the beginning of August, enabling the Brazilian national data protection authority (ANPD) to effectively enforce the LGPD.

According to the newly effective provisions, data controllers who do not comply with the LGPD may be subject to the following sanctions, ...

Bank of Israel Requires Intimate Information About Israelis’ Consumption Habits

Israel’s central bank, the Bank of Israel (BoI), has published a set of requirements compelling commercial banks and credit card companies to disclose a comprehensive list of personal information regarding their consumers’ consumption habits. The information will be stored by the BoI in a designated central database. The BoI had initially requested to receive information spanning the last seven years, ...

China’s Supreme Court Lays Out Rules for the Application of Facial Recognition Laws

China’s Supreme People’s Court, the top judicial authority in China, published guidelines addressing the application of laws on the use of facial recognition technology when handling civil cases. The document provides guidance for courts on how to apply the various rules in the Civil Code, Cybersecurity Law, Consumer Rights Protection Law, E-Commerce Law, and other relevant legislative instruments.

The Supreme Court clarified that ...