Kyte - Colour Logo

Kyte Press Box on Privacy

Privacy frameworks are tightening worldwide. The Global CBPR Forum has launched government-backed certification seals to support secure cross-border data transfers. Meanwhile, Oregon extends consumer rights to vehicle data, and South Korea authorizes Meta’s face-ID tool to combat scam ads under the latest AI privacy rules.

Read more on GDPR
Posted on: Thursday, June 5th, 2025

Global Privacy Law Updates

Kyte Global is pleased to introduce the Kyte Press Box, a dedicated platform delivering the latest news, insights, and developments in the cybersecurity and compliance industry. This resource provides timely updates and occasional expert analysis to support businesses in maintaining security and regulatory compliance.

In this edition of Global Privacy Law Updates, we highlight three significant developments in data protection:

  • the launch of Global CBPR privacy seals,
  • Oregon’s expansion of consumer rights to car data, and
  • South Korea’s green light for Meta’s facial recognition tool.

These updates reflect the evolving global approach to privacy, cross-border data flows, and responsible AI use.

 

Global CBPR Privacy Seals Go Live

On 28 May, the Global Cross-Border Privacy Rules Forum opened its CBPR and Privacy Recognition for Processors certifications. Roughly 100 companies are covering about 2,000 legal entities. Some of which are already primed for the government-backed seals, which give multinationals one baseline for transferring data across nine founding economies and dozens of associates. Approved Accountability Agents will audit applicants, while CAPE cooperation supports enforcement.

Learn more: here

 

Oregon Extends Privacy Law to Car Data

Signed by Governor Tina Kotek on 27 May. HB 3875 widens the Oregon Consumer Privacy Act so every automaker and affiliate holding in-car data must honour access, correction, and deletion requests. Consequently it must stop selling that information without a driver’s say-so. The change closes a gap that let connected-vehicle makers collect location, biometric, and behavioural details with scant oversight.

Learn more: here

 

Korea OKs Meta’s Face-ID Scam Shield

On 30 May, South Korea’s Personal Information Protection Commission finished its adequacy review and cleared Meta’s facial recognition tool that blocks “celeb-bait” scam ads and helps users regain hacked accounts. The approval, granted under strict retention and transparency rules, is among the first PIPC green lights for commercial face-matching since PIPA’s 2023 overhaul and signals Seoul’s case-by-case approach to AI services.

Learn more: here

You may also be interested in:

Let's Start the Conversation
Speak to Our Experts Today

News & Insights

Stay informed with our dynamic News and Insights section, where we share timely updates, industry trends, and expert perspectives to keep you ahead of the curve and informed about the latest developments in the field. Explore a wealth of valuable resources that empower you with knowledge and actionable insights for informed decision-making.

Kyte Global Partners with SPD Technology
Wednesday, 23rd September 2026

A new strategic partnership brings together Kyte Global's compliance and cybersecurity expertise with SPD Technology's software engineering capability.

Continue reading
Reducing PCI DSS Scope How Tokenization and Network Segmentation Cut Your Compliance Burden
Wednesday, 2nd September 2026

PCI DSS scope is one of the few variables entirely within your control, and organisations that reduce it deliberately through tokenization and network segmentation consistently run leaner, more sustainable compliance programmes. This article explains how both techniques work, where the implementation detail matters, and how to prevent scope from expanding again once you have brought it under control.

Continue reading
What PCI DSS, DORA, ISO 27001, and NIS 2 Actually Require from Your Penetration Testing Programme
Thursday, 20th August 2026

Most organisations running annual penetration tests believe they are meeting their regulatory obligations. In many cases, they are meeting some of them, some of the time. PCI DSS, DORA, ISO 27001, and NIS 2 each carry distinct testing requirements, and here is what each framework actually requires and how one well-designed engagement can cover all of them.

Continue reading

Raising standards since 2006.

Kyte Global, with clients in over 65 countries has established itself as a unique company providing a one-stop-shop to all your information security and compliance requirements.

At Kyte Global we attempt to add value in everything we do. Our services have evolved as a result of the growing needs of our clients. Regulations keep getting stricter, compliance requirements keep getting more onerous and clients find themselves spending more time addressing these issues rather than focusing on their business. At the same time, resources with the right knowledge and experience are hard to come by. Kyte Global tries to tackle these issues by providing a one stop shop to all the client’s needs. Kyte Global understands that Compliance is an effective way of ensuring that controls are implemented.

Internally, Kyte Global is organised in teams, each dedicated to a specific service, usually revolving around a specific standard or regulation. Some of these are PCI DSS, ISO 27001, GDPR, Internal Audit, AML, Gaming, Penetration Testing, Training to name a few. Each team is made up of trained professionals, all experts in their own field.

Over the years, Kyte Global has established partnerships with suppliers that develop and implement industry leading solutions so that it can make recommendations to clients who require such services or products. Kyte is proud to have a network of partners that can assist its clients, big or small, in virtually all of the industries it operates in.

Who We Are Contact Us