TikTok Fined Again in Brazil for Violating Minors' Data Protection Rules
Brazil's National Data Protection Authority (ANPD) fined TikTok for failing to comply with child data processing rules, marking a significant enforcement action.
Brazil's National Data Protection Authority (ANPD) fined TikTok for failing to comply with child data processing rules, marking a significant enforcement action.
The U.S. Federal Trade Commission (FTC) has referred a complaint against TikTok to the Department of Justice, alleging violations of the Children's Online Privacy Protection Act (COPPA). This action could result in a fine of up to $400 million, making it one of the largest penalties in FTC history. The move highlights ongoing scrutiny of TikTok's data practices and their impact on young users.
Over the past two years, generative AI tools have rapidly evolved from a "novelty" into everyday office tools. From writing emails, creating PPTs, coding, to organizing meeting minutes—employees may interact with AI in almost every aspect of their work. However, many companies still operate in a phase where AI usage is "employee-initiated, department-tolerated, and company-unaware." For multinational enterprises, especially those with operations or employees in both China and the U.S., this laissez-faire approach is amplifying risk exposure. The EU AI Act's General-Purpose AI (GPAI) rules have entered the enforcement phase; U.S. AI regulation presents a fragmented landscape of "federal restraint, state proliferation"; and cross-border data flows between China and the U.S. are further compounded by each country's data security and export control rules, making this one of the most overlooked and perilous areas for many companies.
**The logic of doing RWA in Hong Kong is actually very simple: no matter how new the technology, the nature of the asset does not change, and the old rules still apply.**
The U.S. Federal Register recently published the final rule of Executive Order 14117, enhancing data privacy and security standards.
The European Commission has published its comprehensive review of GDPR implementation, highlighting successes in data protection awareness while identifying challenges in cross-border enforcement.
The Federal Trade Commission has opened formal investigations into several major AI companies over their practices of collecting and using personal data to train large language models.
Chinese regulators imposed a record fine on a major tech company for violating the Personal Information Protection Law by collecting user data without proper consent and failing to implement adequate security measures.
The European Data Protection Board imposed a record-breaking €1.3 billion fine on Meta Platforms for transferring EU user data to the United States in violation of GDPR requirements.