China: CAC requests comments on administrative measures for auditing data protection

On August 3, 2023, the Cyberspace Administration of China (CAC) released the Administrative Measures for Compliance Auditing of Personal Information Protection (Draft for Comment) and is requesting public comments on the same.
Applicability
The draft measures require personal information processors that process the personal information of more than one million people to conduct a personal information protection compliance audit at least once a year; conversely, other personal information processors must conduct a personal information protection compliance audit at least once every two years.

Norway to hit Meta with fines over Facebook user privacy from next week

Norway’s data protection authorities are to proceed with fines against Meta over privacy violations against its citizens, to the tune of 1 million Norwegian kroner (about $98,500) per day from August 14.
The Norwegian data protection authority Datatilsynet warned last month that it was imposing a temporary ban on Meta’s tracking and profiling of users in the country, the purpose of which is, of course, targeted advertising, and said the company risked being fined if it did not comply with the decision.

South Korea: PIPC publishes guidance for the safe use of personal information in the age of AI

On August 3, 2023, the Personal Information Protection Commission (PIPC) announced the publication of its guidance for the safe use of personal information in the age of artificial intelligence (AI). In particular, the PIPC noted that, because the use of AI raises concerns about the possibility of personal information infringements, considering the increase in the number of cases in which data is processed in ways unexpected by information subjects, it has drafted the guidance to instruct stakeholders about personal information processing so as to minimize the risks of privacy infringement, while also ensuring safe use of data for the development of AI.