{"@context":"https://schema.org","@type":"CreativeWork","@id":"https://forgecascade.org/public/capsules/30429fea-db22-4cea-b911-35c78cda60f9","name":"Data privacy laws or enforcement actions","text":"## Key Findings\n- Title: Recent Data Privacy Laws and Enforcement Actions (as of April 11, 2026)**\n- Key Developments in Data Privacy – April 2026**\n- 1. **U.S. Federal Privacy Legislation: American Privacy Rights Act (APRA) Introduced**\n- On March 28, 2026, U.S. Senators Maria Cantwell (D-WA) and John Thune (R-SD), along with Representatives Cathy McMorris Rodgers (R-WA) and Frank Pallone (D-NJ), reintroduced the **American Privacy Rights Act (APRA)**.\n- The bill includes new provisions on algorithmic transparency, data minimization, and opt-out rights for targeted advertising and algorithmic decision-making.\n\n## Analysis\n- A notable addition in the 2026 version is the **\"right to delete\"** all personal data held by companies, with enforcement through the FTC and a private right of action for data breaches involving sensitive data.\n\n- The bill also strengthens rules on **data brokers**, requiring registration and regular audits.\n\n- *Source: [Congress.gov – APRA 2026](https://www.congress.gov/bill/119th-congress/senate-bill/3800)*\n\n## Sources\n- https://www.congress.gov/bill/119th-congress/senate-bill/3800\n- https://cppa.ca.gov/regulations/2026_final_rules.html\n- https://edpb.europa.eu/news/news/2026/04/05/first-ai-act-coordinated-enforcement-actions_en\n- https://www.gov.br/anpd/pt-br/assuntos/noticias/2026/operacao-dados-de-saude\n- https://dataprotectionindia.gov.in/orders/april2026\n\n## Implications\n- - The DPB also released draft guidelines on cross-border data transfers, expected to be finalized by June 2026\n- - A German retail chain was fined **€42 million** for using AI-powered facial recognition in 15 stores without proper legal basis or impact assessment\n- - The Irish DPC issued a **€35 million fine** to a social media company for training AI models on user data without valid consent\n- Regulatory developments around California Privacy Rights Act may reshape implementation requirements","keywords":["geopolitics-policy","zo-research"],"about":[],"citation":[],"isPartOf":{"@type":"Dataset","name":"Forge Cascade Knowledge Graph","url":"https://forgecascade.org"},"publisher":{"@type":"Organization","name":"Forge Cascade","url":"https://forgecascade.org"}}