Privacy & Information Security Law Blog

On January 28, 2025, the Italian Data Protection Authority announced that it had launched an investigation into the data processing practices of Hangzhou DeepSeek Artificial Intelligence and Beijing DeepSeek Artificial Intelligence.

New York Governor Kathy Hochul recently signed into law several bills (S2659B and S2376B) modifying the state’s breach notification law. The amendments revise the timing requirements for notice to affected individuals, expand the list of regulators to be notified, and add new data elements to New York’s definition of “private information.”

On January 20, 2025, President Trump revoked a number of Biden-era Executive Orders, including Executive Order 14110 on Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence.

On January 21, 2025, the New York state legislature passed Senate Bill (S-929), which provides for the protection of health data. 

On January 23, 2025, the UK Information Commissioner’s Office published its new online tracking strategy for 2025 which sets out how it intends to achieve its vision of a fair and transparent online world where people are given meaningful control over how they are tracked online.

On January 15, 2025, the Federal Trade Commission announced a proposed order against web hosting company GoDaddy for unfair or deceptive acts or practices in violation of Section 5 of the FTC Act, and issued guidance for customers of web hosting services on security practices in light of the settlement.

On January 14, 2025, the UK government opened a consultation seeking views on three proposals aimed at reducing the threat of ransomware attacks.

On January 16, 2025, French Data Protection Authority unveiled its strategic plan for 2025-2028, highlighting its priorities for the coming years.

On January 21, 2025, the Council of the EU adopted the European Health Data Space Regulation.

Earlier this month, the U.S. Consumer Financial Protection Bureau invited public comment on strengthening privacy protections for, and a proposed interpretive rule extending financial consumer protections to, emerging payment mechanisms.