DPO Advisor

Find everything you need to stay up-to-date on evolving privacy & security regulations around the world

Alberta's Public Sector Faces Significant Privacy Regulation Overhaul

November 25, 2025

Alberta's public sector is set for major privacy overhauls, requiring privacy management programs, impact assessments, and breach notifications by June 2026 under the new Protection of Privacy Act (POPA). The legislation also introduces explicit rules for data matching and de-identification.

TeaOnHer App Exposes Users' Personal Data and Driver's Licenses

November 24, 2025

TeaOnHer, a male-focused iOS app, is critically vulnerable, exposing 53,000 users' personal data, including driver's licenses and selfies. TechCrunch also found exposed admin credentials for the CEO, raising severe security and ethical concerns.

Ontario IPC updates De-identification Guidelines for Structured Data

October 15, 2025

Ontario’s IPC released updated De-identification Guidelines for Structured Data, offering practical steps to reduce re-identification risks and strengthen privacy. The guidance promotes responsible, transparent data use across sectors.

Australian Clinical Labs hit with first civil penalty under Privacy Act for 2022 data breach

October 9, 2025

Australia’s Federal Court fined Clinical Labs A$5.8M for a 2022 breach exposing 223K records. The first civil penalty under the Privacy Act signals stricter enforcement of data security and breach reporting duties.

Amnesty International Kenya’s data rights study and guidelines

October 6, 2025

Amnesty International Kenya published a study and data guidelines to boost awareness of Kenya’s Data Protection Act. The report urges stronger oversight and provides practical tools for civil groups to enhance privacy accountability.

South Korea fines SK Telecom $97 million for massive data breach

August 28, 2025

South Korea’s PIPC fined SK Telecom $97M after a breach exposed 23M users. The probe found weak encryption and poor security updates, signaling tougher enforcement under the nation’s Personal Information Protection Act.