This Week in Privacy: 26 April 2021
April 26, 2021
EU: Commission proposes new regulations and plan for EU approach to AI
The European Commission released its proposals for a regulation laying down harmonised rules on artificial intelligence, a regulation on machinery products, as well as a new Coordinated Plan on AI.
In particular, the Commission highlighted that the proposals aim to turn Europe into a global hub for trustworthy AI and that the regulations would apply directly in the same way across all Member States based on a future-proof definition of AI. The Proposed AI Regulation prohibits a number of AI practices and distinguishes between high-risk, limited risk, and minimal risk AI systems.
The Proposed Machinery Regulation focuses on the safe integration of AI systems into machinery and seeks to provide legal clarity, and simplify administrative burdens and costs for companies.
Florida: House of Representatives vote to pass privacy bill
In Florida, the House of Representatives voted to pass House Bill 969 for the Florida Privacy Protection Act.
The bill creates expansive obligations on businesses regarding the processing and collection of personal data, provides consumers with data subject rights, and establishes requirements for data retention and children's privacy. The bill recently underwent a reading in the House which removed the private right of action.
The bill will now be discussed in the Senate Rules Committee, and currently has a proposed entry into force date of 1 July 2022.
China: NPC announces continued deliberations on draft PIPL and draft Data Security Law
In China, the National People's Congress announced that the draft Personal Information Protection Law as well as the draft Data Security Law are under continued consideration.
The NPC noted that it aims to amend the current legislation, including enacting the draft Data Security Law and the PIPL, which will focus on innovation-driven development and accelerating the development of a modern industrial system.
Adoption of the laws would bring about an overhaul to the current data protection regime in China.