Privacy & Information Security Law Blog

On June 27, 2025, the Amendment of the Anti-unfair Competition Law of PRC was published.  The AUCL will take effect on October 15, 2025.

On July 24, 2025, the California Privacy Protection Agency finalized CCPA regulations on automated decision-making technology, risk assessments and cybersecurity audits.

On July 23, 2025, the Trump Administration published an AI Action Plan and three Executive Orders on AI.

On July 22, 2025, the European Commission announced the launch of the process to adopt new adequacy decisions for the UK following the European Commission’s assessment of the recently passed UK Data (Use and Access) Act 2025.

On July 14, 2025, the European Commission published guidelines on the protection of minors under the Digital Services Act aimed at safeguarding minors in the digital environment.

Texas recently enacted a law requiring electronic health records to be physically stored in the U.S., among other requirements.   

On June 20, 2025, the Texas governor signed into law S.B. 2121, which amends the Texas Data Broker Act’s definition of “data broker” and applicability thresholds.

On July 7, 2025, the Department of Health and Human Services’ Office for Civil Rights announced a HIPAA enforcement action against a behavioral health care provider for failure to comply with the HIPAA Security Rule, resulting in a $225,000 fine and a two-year corrective action plan.

The California Privacy Protection Agency Board will hold a board meeting on July 24, 2025, at 9:00 am PDT.

On July 10, 2025, the European Commission published the final version of the General-Purpose AI Code of Practice.