November 16, 2022 |

Privacy News Roundup | November 16, 2022

International News

European Union passes landmark rules with hefty fines

The EU has passed landmarks rules that will impact big tech companies including:

  • The Digital Marketers Act (DMA) requires “gatekeepers” to make their messaging services interoperable and provide business users access to their data.
  • The Digital Services Act (DSA) bans targeted advertising aimed at children or based on sensitive data such as religion, gender, race, or political opinion.
  • The Artificial Intelligence Act regulates the use of facial recognition and biometrics.

While these Acts are aimed at non personal data, they do not exempt personal data from their scope.

This raises concerns over companies facing penalties under both the Acts and the GDPR, which is significant as violators can face fines up to:

  • 10% of annual global turnover for DMA violations.
  • 6% for DSA violations.
  • Greater of 4% or €20 million for GDPR violations.

Canada introduces draft privacy act

Canada has introduced a draft privacy act, Digital Charter Implementation Act, 2022 (Bill C-27).

The bill takes a three-in-one approach to strengthening privacy law and creating rules for AI development, while also extending the Digital Charter. Bill C-27 contains:

  1. Consumer Privacy Protection Act
  2. The Personal Information and Data Protection Tribunal Act
  3. The Artificial Intelligence and Data Act (AIDA).

India withdrawals its Personal Data Protection Bill

India has withdrawn its Personal Data Protection Bill and identified four clauses that will be dropped or re-drafted when a new version of the bill is reintroduced.

UK reaches agreement with the US

The US and UK have announced an agreement to allow both countries to gain improved access to viral data in order to combat serious crime and protect national security interests.

France continues to fine Facebook

In addition to its €60 million fine from January 2022, France’s data protection authority is giving Facebook three months to allow users located in France to refuse cookies as easily as they can accept them. If Facebook does not comply, it will face a penalty of €100,000 per day of delay.


Use of, access to, and information exchanged on this web page or any of the e-mail links contained within it cannot and does not create an attorney-client relationship between Han Santos, PLLC, and the user or browser. Please do not post any personal or confidential information. You should contact your attorney to obtain advice with respect to any particular issue or problem. Contact us for additional information. One of our lawyers will be happy to discuss the possibility of representation with you. The opinions expressed at or through this site are the opinions of the individual author and may not reflect the opinions of the firm or any individual attorney.