and the EU. Summary of key events:

• EU-Japan EPA: ** This agreement establishes a framework for data sharing between the EU and Japan, aiming to facilitate cross-border data flows.

  China-EU Cross-Border Data Flow Communication Mechanism: China and the EU began discussions under a new mechanism aimed at addressing challenges related to the transfer of nonpersonal data. This initiative, part of the ongoing High-level Digital Dialogue, represents a significant step toward resolving data transfer issues between the two regions. Switzerland’s U.S. Adequacy Decision: Switzerland issued an adequacy decision on August 14, 2024 , allowing the transfer of personal data to the U.S. under the Swiss- U.S. Data Privacy Framework. This decision, effective from September 15, 2024 , aligns with similar agreements the U.S. has with the EU and U.K. , ensuring that data transfers meet high privacy standards.

  This action highlights the growing global trend of regulators scrutinizing data flows and imposing fines for non-compliance. Meta’s response to the Brazilian court’s decision was swift and decisive. They appealed the decision, arguing that the court’s ruling was based on a misunderstanding of WhatsApp’s data-sharing practices. Meta also claimed that the suspension of access to consumer data was an overreach of the court’s authority. Uber’s Data Fines:

  Federal Trade Commission (FTC) and the U.K. Information Commissioner’s Office (ICO) collaborated on a review of children’s privacy practices in the U.K. The review focused on the use of data for marketing purposes, particularly targeting children under 13. The review highlighted the need for greater transparency and control over data collection and usage by children.

  2023/01. These regulations aim to ensure compliance with the General Data Protection Regulation (GDPR) and other international data protection standards. The guidance also addresses the transfer of personal data to third-party service providers, emphasizing the importance of contractual safeguards and data security measures. The ANPD’s guidance is crucial for businesses operating in Brazil and those handling data from Brazilian citizens.

  Data security: A proactive approach to safeguarding information.

  The DSCI report emphasizes the importance of a robust data security framework, encompassing data governance, data protection, and data privacy. It highlights the need for organizations to adopt a proactive approach to cybersecurity, focusing on risk assessment, vulnerability management, and incident response planning. The report also stresses the importance of employee training and awareness programs, emphasizing the role of human factors in data security breaches.