PRIVACY DAILY 21.07.2025

L’AUTORITÀ PRIVACY DELL’UGANDA ORDINA A GOOGLE DI REGISTRARSI COME RESPONSABILE DEL TRATTAMENTO
In una decisione storica, l’Ufficio per la Protezione dei Dati Personali dell’Uganda ha ordinato a Google di registrarsi formalmente come responsabile del trattamento dei dati nel Paese. Il provvedimento nasce da una valutazione secondo cui Google tratta dati personali di cittadini ugandesi, rientrando quindi nelle previsioni della normativa nazionale. Si tratta di una delle prime applicazioni concrete della legge ugandese sulla protezione dei dati del 2019 contro una big tech globale.

L’NBA CHIEDE ALLA CORTE SUPREMA USA CHIARIMENTI SULLA LEGGE SULLA PRIVACY DEI VIDEO
La National Basketball Association (NBA) ha presentato ricorso alla Corte Suprema statunitense per ottenere chiarezza interpretativa sul Video Privacy Protection Act (VPPA), una legge del 1988 nata per tutelare la riservatezza dei dati sulle abitudini di visione dei contenuti video. L’NBA teme che l’applicazione estensiva del VPPA possa limitare le sue attività digitali, comprese le app e le piattaforme streaming, esponendola a azioni collettive.

IL BELIZE APPROVA IL RILASCIO DELL’IDENTITÀ DIGITALE NAZIONALE
Il governo del Belize ha dato via libera all’implementazione dell’ID digitale nazionale, un’iniziativa destinata a migliorare l’accesso sicuro e centralizzato ai servizi pubblici. Il nuovo sistema sarà biometrico e interoperabile, con l’obiettivo di promuovere inclusione digitale, trasparenza amministrativa e modernizzazione dei registri civili. Il progetto sarà implementato gradualmente sotto la supervisione di un’autorità nazionale dedicata.


UGANDA ORDERS GOOGLE TO REGISTER AS A DATA PROCESSOR IN LANDMARK RULING
In a landmark privacy decision, Uganda’s Personal Data Protection Office has ordered Google to register as a data processor under the country’s 2019 data protection law. The authority found that Google processes personal data of Ugandan citizens, thus falling under national regulatory obligations. This marks one of the first enforcement actions against a global tech company under Uganda’s privacy regime.

NBA APPEALS TO US SUPREME COURT FOR CLARITY ON VIDEO PRIVACY LAW
The National Basketball Association (NBA) has appealed to the U.S. Supreme Court seeking clarity on the Video Privacy Protection Act (VPPA), a 1988 law designed to protect users’ video viewing history. The NBA argues that an overly broad interpretation of the VPPA could impair digital business models, especially involving streaming platforms and apps, and expose the league to class action lawsuits.

BELIZE APPROVES NATIONAL DIGITAL ID ROLLOUT
The Cabinet of Belize has approved the launch of a national digital ID program aimed at enhancing secure access to public services. The system will be biometric, centralised, and interoperable, supporting digital inclusion, transparency, and civic registry modernisation. The rollout will be overseen by a national digital identity authority and implemented in phases.


OHIO PASSES AGE VERIFICATION LAW FOR ADULT CONTENT SITES
The state of Ohio has passed a new law requiring age verification for access to adult content websites. The law, signed by Governor Mike DeWine, will take effect on October 1, 2025. Under the legislation, any platform containing at least 33.3% sexually explicit content must implement “commercially reasonable” age verification methods to ensure users are at least 18 years old.
Verification methods may include biometric systems or the use of official identification. Proponents claim the law is meant to protect minors, while critics raise concerns about privacy risks and restrictions on freedom of expression. Ohio joins a growing list of U.S. states enacting similar regulations.

META SETTLES $8 BILLION PRIVACY LAWSUIT
Meta Platforms has reached a preliminary settlement in a U.S. class action lawsuit related to the misuse of user data. The lawsuit, which threatened up to $8 billion in damages, accused Meta of tracking users even after they had disabled activity history on apps and websites.
The settlement does not include any admission of wrongdoing by Meta. However, the company has agreed to modify some of its data collection practices and improve transparency. The exact financial terms have not been disclosed, and the agreement is still subject to court approval. The case may set a precedent for future digital privacy enforcement.

MEDICAID OFFICIALS ALLOWED ICE ACCESS TO HEALTH DATA TO TRACK MIGRANTS
An investigation by The Guardian revealed that some U.S. Medicaid officials allowed Immigration and Customs Enforcement (ICE) to access healthcare data of program recipients to help locate undocumented migrants.
The data accessed included sensitive personal details such as home addresses, phone numbers, and emergency contacts. Experts argue this violates core principles of health privacy and may deter migrants from seeking necessary medical care. ICE defended the practice as legally justified, but it has drawn harsh criticism from human rights advocates and healthcare organizations.