PDPC Releases List Of Enforcement Actions

Singapore's Personal Data Protection Commission has issued new guidelines clarifying how companies must handle personal data when developing and deploying generative AI systems. These guidelines address critical compliance questions around publicly available data, consent requirements, anonymization practices, and ongoing obligations for access and correction requests throughout the AI lifecycle.

In Singapore, private sector organisations must generally comply with the transfer limitation obligation in the Personal Data Protection Act (the Act).

This update looks at the key objectives, structural framework and the main data protection rules under the new regime.

Singapore's Personal Data Protection Act 2012 (PDPA) provides the primary legal framework for the responsible collection, use and disclosure of personal data by organisations.

The Personal Data Protection Commission (PDPC) of Singapore recently issued a mandate requiring all businesses operating in the country to appoint a Data Protection Officer (DPO)...

On October 11, the PDPC issued an opinion that fined an insurance provider for failing to make reasonable security arrangements to protect against the unauthorized disclosure of the personal data...

On April 9, 2018, the PDPC issued new advisory guidelines on in-vehicle recordings by transport services for hire.

在人手一机的时代，掏出电子设备就能轻易拍照录像，发布到网络平台也在弹指间

On July 21, the Personal Data Protection Commission ("PDPC") imposed a $5,000 fine on Toh-Shi Printing Singapore for its failure to implement proper and adequate verification procedures...

The undertaking will be published in full, but the PDPC will consider redacting commercially confidential matters.

The Code is voluntary, but it will likely become an important reference point for demonstrating compliance with Article 50 of the AI Act.

The New York Stock Exchange and Nasdaq are implementing overnight trading sessions starting December 6, 2026, extending the trading day to nearly 23 hours by compressing the daily pause to just one hour. While this evolution toward continuous trading introduces new considerations for corporate actions, disclosure timing, and deal execution, the practical impact varies significantly between NYSE-listed companies,

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

China's Supreme People's Court has issued comprehensive judicial rules addressing artificial intelligence disputes, establishing frameworks for product liability, intellectual property rights, and data protection. These landmark opinions provide critical guidance for global companies navigating AI-related legal risks in China's evolving regulatory landscape.

The Illinois Holocaust Museum & Education Center (IHMEC) held a third program as part of its Jones Day Foundation Community Series, a special series of educational events

The Ninth Circuit has ruled that health plan participants whose confidential information was disclosed without authorization have standing to sue in federal court, even without showing financial loss or future harm. This decision, which departs from the risk-based approach many courts have applied since TransUnion, relies on the centuries-old action for breach of confidence and could have significant implications for companies' privacy commitments and data-sharing practices.

The European Commission has initiated infringement procedures against 20 EU Member States for failing to transpose the EmpCo Directive by the March 27, 2026 deadline. This directive aims to combat greenwashing by requiring substantiation of environmental claims and third-party certification for sustainability labels, with full implementation expected by September 27, 2026.

Mexico's comprehensive anti-money laundering framework has undergone a sweeping transformation through Acuerdo 115/2026, introducing mandatory risk-based methodologies, enhanced client due diligence protocols, and automated monitoring requirements. With implementation deadlines beginning March 1, 2027, obligated parties conducting vulnerable activities face compressed timelines to overhaul their compliance infrastructure while navigating heightened enforcement risks and stricter beneficial ownership thresho

The Environmental Protection Agency has proposed two rules that would significantly alter the regulatory landscape for PFAS in drinking water, rescinding standards for four substances...

The European Commission has proposed replacing the EU's three core procurement directives with a single, directly applicable Regulation that would fundamentally reshape how companies compete for public contracts across Member States. The reform introduces mandatory quality criteria thresholds, embeds ESG considerations as evaluation factors, and establishes new security and European-preference provisions that could restrict participation based on ownership, supply chain exposure, and strategic dependencies.