43 briefs
Companies holding transaction records must give identity-theft victims their application and business-transaction records within FCRA's 30-day limit — the FTC fined Amazon $2.25m for refusing
Issuers and their advisers must move all MAR insider lists to the alleviated format under the new Implementing Regulation before it applies
AML teams at BSA-regulated institutions can share fraud indicators in real time under the 314(b) safe harbour only if registered and verifying the counterpart is a registrant
Hong Kong retail and digital banks must engage multiple CRAs with 24-hour switch-over and annual drills, and keep all consumer credit data within Hong Kong
Member State police authorities and Europol must build and configure EPRIS to the Decision's technical, security and logging specifications to exchange police records
Vehicle manufacturers must implement the Appendix X procedures for secure, standardised OBD and RMI access (authentication, pseudonymised traceability, API provision, server availability and cybersecurity checks) so independent operators obtain non-discriminatory, machine-readable diagnostic and repair data
Covered platforms must remove valid intimate-image abuse reports within 48 hours
Online platforms must prove UK illegal-content controls work in practice
Covered platforms must run 48-hour NCII takedown workflows by 19 May
Member States should file age-verification rollout plans by 30 June and deploy trusted solutions by year-end
The Guardian
·
General Motors data teams face a five-year broker-sale ban for consumer-driving data once the settlement is approved
The Guardian
·
Electronic service providers must keep Section 702 intake and review live for 45 days
