This Week in Privacy: 2 August 2021
August 02, 2021
ADGM: ADGM issues new rules for data protection fees and fines for failure to pay
The Abu Dhabi Global Market announced that it had issued new rules covering fees and fines under the Data Protection Regulations 2021.
The Fees Rules state that the Data Protection Fee under Section 24(1) of the Regulations will be $300. According to the new Fines Rules, failure to pay the Data Protection Fee will incur a fine of up to $750 and failure to pay the Renewal Fee will incur a fine of up to $250 under Sections 56(1) and 56(2) of the Regulations.
Furthermore, the ADGM stated that, for entities registered on or after 14 February 2021, both the Fines Rules and the Fees Rules will apply from 14 August 2021, while for entities in existence before 14 February 2021, the new rules will apply from 14 February 2022, in line with the respective commencement dates for the Regulations.
The ADGM also highlighted that the Office of Data Protection will be publishing a suite of guidance to assist entities in understanding and interpreting the Regulations.
Read more here.
Alberta: Government requests comments on privacy protection engagement
The Government of Alberta announced that it is seeking comments in regards to privacy protection reform.
The Government highlighted that the comments will focus on protections related to the Personal Information Protection Act and the Freedom of Information and Protection of Privacy Act and outlined that those who wish to undertake the survey are required to share their thoughts on the privacy related topics including:
- enhancing the rights of Albertans to access and control their own privacy when interacting with government, other public bodies, and private sector organisations;
- establishing stronger transparency requirements; and
- establishing parameters and legal requirements for collecting, using, and disclosing data that has been de-identified.
Comments can be submitted by 20 August.
Read more here.
USA: President signs memorandum on improving cybersecurity for critical infrastructure control systems
The U.S. President, Joe Biden, signed a Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems.
The memorandum establishes a voluntary initiative to defend the US' critical infrastructure by encouraging and facilitating the deployment of technologies and systems that provide threat visibility, indications, detection, and warnings, and that facilitate response capabilities for cybersecurity in essential control system and operational technology networks. In addition, the memorandum highlights the need for baseline cybersecurity goals that are consistent across all critical infrastructure sectors, as well as a need for security controls for select critical infrastructure that is dependent on control systems.
The memorandum directs CISA and NIST, in collaboration with other agencies, to develop cybersecurity performance goals for critical infrastructure to assist companies responsible for providing essential services like power, water, and transportation to strengthen their cybersecurity.
Read more here.