\n\n
Key developments: Italy’s data‑protection authority imposed a €7 million fine on IQVIA after its so‑called "anonymous" health database was deemed re‑identifiable, marking a sharp enforcement step under the GDPR. In the UK, the ICO pushed ten leading AI firms to adopt new safeguards, launched a call for evidence on agentic AI, and interrogated major players such as OpenAI, Anthropic and Meta. Spain’s AEPD added guidance on algorithmic transparency for hiring, while Germany’s Hamburg DPA warned about hyper‑personalised ChatGPT ads. Malaysia released an AI‑and‑data‑protection framework for public comment, and Australia’s OAIC clarified that privacy‑law responsibility rests with software providers handling data from smart‑glass apps. Norway is set to temporarily ban smart glasses in certain public spaces, and California’s governor vetoed a bill that would have broadened penalties for wearing recording glasses in private areas.
Why they matter: These actions illustrate a global escalation in regulating AI‑driven data processing, emphasizing that even “anonymous” datasets can trigger GDPR liability. The UK’s proactive engagement with AI developers signals a shift from reactive enforcement to pre‑emptive governance, while the European guidance on algorithmic transparency and biometric advertising points to tighter limits on automated decision‑making. Asian and Australasian moves show that privacy responsibility is increasingly being assigned to data‑handling software firms, not just hardware manufacturers.
What to watch next: Expect further ICO‑driven policy refinements as AI agents become more capable, possible follow‑up fines in Italy or other EU states for similar re‑identification risks, and industry responses to Malaysia’s consultation. Watch for legislative developments on smart‑glass privacy in the US and Europe, and how firms adapt to the expanding web of AI‑specific privacy guidance. [[1]]