When the election was called for 4 July, 2024, it came as a relative surprise. Both for the country, and for data protection watchers who had been preparing for the seemingly assured passage of the Data Protection and Digital Information (DPDI) Bill. 

But the legislation has not made it through the parliamentary ‘wash-up’ procedure which takes place in the final days of a parliament, so the bill will not be passed and no changes to the UK’s data protection regime will come into force in the near future. 

Thousands of employees’ biometric data must be deleted, according to a new ruling by the Information Commissioner’s Office. Serco, one of the UK’s largest employers was told to stop using fingerprint scanners and facial recognition software for staff clocking on and off in a warning that could force many other employers to change their practices.

In January 2022, China promulgated two laws specific to AI applications. While the provisions regarding the management of algorithmic recommendations for internet information services (Algorithm Provisions) have been in effect since March 2023, the provisions for managing deep synthesis of internet information services (Draft Deep Synthesis Provisions) are still in the drafting stage.

The newly elected leftist government of Lula in Brazil is in the process of developing its first law to regulate artificial intelligence. In December 2022, a Senate panel presented a report containing studies on AI regulation, along with a draft for AI regulation. 

The main aims of the legislation are to safeguard the rights of individuals affected by AI systems, categorise the level of risk associated with these systems, and establish governance measures for companies that provide or operate AI systems.