Federal Plan Modernizes, Preempts US Financial Privacy Rules
A discussion draft released by the House Committee on Financial Services proposes modernizing the Gramm-Leach-Bliley Act with data minimization provisions, updated sensitive data definitions covering geolocation and biometrics, and AI disclosure requirements. The draft would shift GLBA from a federal floor to a federal ceiling, preempting state financial privacy laws. Most state comprehensive privacy laws currently exempt GLBA-covered financial institutions from their requirements.
OPC Loblaw Decision: Key Privacy Anonymization Lessons
IAPP published an opinion piece analyzing a recent Office of the Privacy Commissioner of Canada finding on Loblaw's Optimum loyalty program, highlighting three key anonymization lessons under PIPEDA. The OPC confirmed that secondary uses of data are permissible, that anonymization requires eliminating only the serious possibility of re-identification rather than zero risk, and that independent third-party review of anonymization processes is expected.
ICO Guidance on Personal Data Use in UK Local Elections
The ICO published guidance on 10 April 2026 explaining how UK voters can expect their personal data to be handled during the May 2026 local elections in England and Parliamentary elections in Scotland and Wales. The guidance addresses profiling techniques, social media advertising transparency, and data use in petitions and surveys by political parties. Political parties are reminded that they must provide clear privacy information and opportunities for voters to object to data profiling.