JANUARY 2026 ISSUE NO. 297

https://campaign-image.com/zohocampaigns/133052000002457092_zc_v53_artboard_1.png
   

International

  • 28th January would be globally observed as Data Privacy Day, highlighting the importance of protecting personal information in today's world.

   

APAC
  • Indian Ministry of Electronics and IT indicated that compliance timelines under the data protection law for large technology companies may be shortened.
  • Deepfake Prevention and Criminalization Bill introduced in the Indian Parliament.
  • Amendments to China’s Cybersecurity Law officially took effect.
  • Vietnam’s Personal Data Protection decree entered into force.
  • New Zealand’s Office of the Privacy Commissioner released a statement on a data breach of health information management platform.
  • Brunei Darussalam’s Personal Data Protection Order approved and published in the official Gazette.

   

EMEA

  • UK’s Information Commissioner Office unveiled plans to foster responsible agentic AI.
  • Italian data watchdog fined a multi-utility company EUR 300,000 for data security failures.
  • Belgian Data Protection Authority released its Strategic Plan for the period 2026-2028.
  • Latvia’s Data Inspectorate released a preventive inspection report on residential building management services.
  • Norway’s Health Directorate issued updated guidelines recommending reduced screen use for children and youngsters.
  • Datatilsynet, the Danish Data Protection Authority outlined its supervisory focus areas for 2026.
  • Finnish Data Protection Ombudsman updated its FAQs on personal data processing in the context of housing and housing companies.
  • Swedish Privacy Protection Authority published guidance on privacy-friendly AI training using synthetic data.
  • Slovakia’s Personal Data Protection Office raised concerns over the ongoing transfer of TikTok user’s personal data to China.
  • Turkish Personal Data Protection Authority announced a data breach in an electricity distribution company.
   

Americas 

  • The US - FTC reached a settlement of USD 10 million with an entertainment company over alleged violations of the Children's Online Privacy Protection Act.
  • Indiana’s Consumer Data Protection Act formally entered into force.
  • Law on data breach notification took effect in California, requires organisations to notify breach within 30 days.
  • Virginia’s law on social media platforms, restricting addictive feeds, became effective.
  • Attorney General of New York secured a USD 500,000 settlement with a healthcare provider for failures in safeguarding patient data.
  • Consumer data privacy legislation entered into force in Kentucky.
  • Ecuador’s Data Protection Superintendency adopted the Institutional Regulatory Plan for 2026.
  • Rhode Island’s Data Transparency and Privacy Protection Act became effective.
  • Illinois bill limiting predictive data analytics in hiring and credit took effect
   

Click here to read the complete newsletter with official links

   

Gurugram office: 1st Floor, AIHP Palms, 242 & 243, Udyog Vihar Phase-IV, Gurugram - 122015

Dubai office: Unit: 9, 9th Floor, Arabian Sky Business Centre, CitiBank Building, Sheikh Rashid Road, Dubai, UAE

Phone: +91-124-4309062 | Email: newsletter@Privacydesk.in 

Delhi (NCR) | Dubai 

   

Disclaimer: This update is the copyright of Reina Legal. The update is not intended to be a form of solicitation or advertising. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate thereafter. No person should act on such information without appropriate professional advice based on the circumstances of a particular situation. Unsubscribe