Latest Updates

USNews

TikTok Fined Again in Brazil for Violating Minors' Data Protection Rules

Brazil's National Data Protection Authority (ANPD) fined TikTok for failing to comply with child data processing rules, marking a significant enforcement action.

Reuters
USNews

TikTok Faces $400 Million Fine in the U.S. for Violating Children's Data Privacy

The U.S. Federal Trade Commission (FTC) has referred a complaint against TikTok to the Department of Justice, alleging violations of the Children's Online Privacy Protection Act (COPPA). This action could result in a fine of up to $400 million, making it one of the largest penalties in FTC history. The move highlights ongoing scrutiny of TikTok's data practices and their impact on young users.

Federal Trade Commission
CNNews

Invisible Cross-Border Data: Employees' Daily AI Operations Are Quietly Triggering Compliance Obligations

Over the past two years, generative AI tools have rapidly evolved from a "novelty" into everyday office tools. From writing emails, creating PPTs, coding, to organizing meeting minutes—employees may interact with AI in almost every aspect of their work. However, many companies still operate in a phase where AI usage is "employee-initiated, department-tolerated, and company-unaware." For multinational enterprises, especially those with operations or employees in both China and the U.S., this laissez-faire approach is amplifying risk exposure. The EU AI Act's General-Purpose AI (GPAI) rules have entered the enforcement phase; U.S. AI regulation presents a fragmented landscape of "federal restraint, state proliferation"; and cross-border data flows between China and the U.S. are further compounded by each country's data security and export control rules, making this one of the most overlooked and perilous areas for many companies.

CNLaw

100,000 People: A New Compliance Threshold

If you process information of fewer than 100,000 people, do you still need full compliance? Starting September 1, the answer has changed.

Cyberspace Administration of China (CAC)
USNews

How to Issue RWA in Hong Kong Legally?

**The logic of doing RWA in Hong Kong is actually very simple: no matter how new the technology, the nature of the asset does not change, and the old rules still apply.**

USNews

EO14117 Final Rule Strengthens Data Privacy and Security Measures

The U.S. Federal Register recently published the final rule of Executive Order 14117, enhancing data privacy and security standards.

Federal Register
CNLaw

China Publishes Draft Regulations on Facial Recognition Technology

China's Ministry of Public Security and CAC jointly released draft regulations governing the use of facial recognition technology, setting strict conditions for deployment in public spaces.

Ministry of Public Security
EUNews

GDPR at Eight: European Commission Publishes Comprehensive Review Report

The European Commission has published its comprehensive review of GDPR implementation, highlighting successes in data protection awareness while identifying challenges in cross-border enforcement.

European Commission