Watch for the UK GDPR!. The UK currently operates under EU GDPR, which superseded preexisting member state laws. Once the UK leaves the EU via Brexit, the UK’s Data Protection Act (DPA) will come back into effect, along with a 2019 amendment that merges it with the requirements of the EU GDPR. This proposed UK GDPR should be very similar to EU GDPR, but EU regulators will need to vet its adequacy.
The passage of CA’s Prop 24 has been getting a lot of press since the U.S. election because it significantly expands CCPA. But three other important U.S. state laws were also passed in the last week. 1. Massachusetts’ Right to Repair Law: gives car owners and repair shops access to car data without going through the manufacturer. 2. Michigan’s Proposal 20-2: specifies that a search warrant will be required to access personal electronic data and communications. 3. Portland, Maine’s Ballot Question B: prevents the city and officials from using facial recognition on groups or members of the public.
A new survey found that more than 2,000 law enforcement agencies in the U.S. have acquired mobile device forensic tools (MDFT). Use is on the rise, including for “warrantless consent searches” to seize phones and extract data.
Procrastinators of the world can throw a party whenever they get around to it: Google has once more pushed back complete third-party cookie deprecation. The new target is “early next year.” Reasons for the delay include concerns expressed by U.K. data regulator Information Commissioner’s Office, an ongoing inquiry by the U.K. Competition and Markets Authority, and widespread discontent in the advertising ecosystem.