Argentina includes changes to the data protection bill
28 November 22
Carolina Limbatto
The Argentinian data protection authority published a revised version of the personal data protection bill. The main changes include the definition of express and prior consent, increasing the period for data breach reporting, and the creation of a Council for the provincial authorities.
Argentina adheres to Convention 108+
28 November 22
Carolina Limbatto
The Argentinian Congress approved its accession to the protocol on the automatic processing of personal data, known as Convention 108. The protocol aims to reinforce the personal data protection framework by taking into account the development of new information and communication technologies, such as the use of artificial intelligence when facilitating cross-border data flows.
Revised directive on the security of network and information systems adopted
28 November 22
Visiola Pula
The Council of the EU endorsed on 28 November 2022 its provisional agreement with the European Parliament on the revised directive on the security of network and information systems (NIS2). NIS2 will enter into force on the twentieth day following its publication.
EU-US privacy shield successor might be adopted by spring 2023, according to European Commission
27 November 22
Sebastian Naste
Bruno Gencarelli (representing European Commission DG Justice) announced that a new draft adequacy decision to succeed the invalidated EU-US privacy shield might be published in December 2022. The final adequacy decision which will facilitate the free flow of personal data between the EU and the US is expected to be adopted by spring 2023. The Commission is still working on new standard contractual clauses to address data transfers to companies located outside the EU but subject to the GDPR (expected in the first half of 2023) and on the review of existing adequacy decisions (expected 3Q 2023).
EU Digital Economy Weekly Report
27 November 22
Sebastian Naste
This week’s edition features stories about the latest steps towards the adoption by the European Commission of a new framework for personal data transfers from the EU to the US; and the fourth in a series of reports by Cullen International on the revised directive on the security of network and information systems (NIS2) covering the supervisory and enforcement framework. It also lists events taking place this week.
IFT releases second report on e-commerce platforms´ terms and conditions
25 November 22
Jose Jehuda Garcia
The Mexican telecoms regulator, IFT, published its second report on the terms and conditions (T&Cs) of e-commerce platforms. The report seeks to provide transparency for, and inform, consumers about the T&Cs they are subject to when they carry out transactions on these platforms.