Mass Disclosure of Personal Data and Privacy Lessons from Slovakia and the EU
IAPP published an analysis examining EU court decisions on data disclosure requirements. The analysis covers Slovakia's Constitutional Court striking down an NGO donor disclosure law, CJEU rulings invalidating public access to Ultimate Beneficial Owner registries (C-37/20, C-601/20), and annulment of the Data Retention Directive (C-293/12, C-594/12). The piece emphasizes that blanket transparency obligations must be proportionate to privacy rights.
Draft Children's Online Privacy Code for Online Services
Australia's OAIC released an exposure draft of the Children's Online Privacy Code, proposing new obligations for online services to protect children's data. The code requires consent before targeted advertising using children's data, grants children rights to request data deletion, and mandates notifications when parents consent on behalf of children or when geolocation is being tracked. Public consultation runs for 60 days, with the code set to become law in December 2026.
California Higher CCPA Fines Age Assurance Enforcement Ramp-up
California Privacy Protection Agency and state attorneys general indicated increased enforcement activity at IAPP Global Summit 2026. CalPrivacy is considering higher CCPA fines following $4 million in total settlements from five cases. The California AG's office is preparing rulemaking on age verification requirements under the Protecting Our Kids from Social Media Addiction Act. Enforcement priorities include data minimization and purpose limitation principles.