Sign in

Graham Greenleaf

@grahamgreenleaf.bsky.social
365 followers 41 following 68 posts

Australian academic in law & infotech. Hon. Professor Macquarie University, Sydney, Australia; Co-Founder & Senior Researcher, AustLII. Posts are in individual capacity only, not for Macquarie or AustLII. Details at www2.austlii.edu.au/~graham

PostsRepliesMedia
Graham Greenleaf @grahamgreenleaf.bsky.social · 21/08/2026
Australia's Federal Parliament has established a Joint Select Committee on Artificial Intelligence with detailed Terms of Reference www.aph.gov.au/Parliamentar... . It is due to report by 30 Nov 2026. No date for submissions yet set. @luizajarovsky.bsky.social
aph.gov.au
Joint Select Committee on Artificial Intelligence
The Joint Select Committee on Artificial Intelligence was appointed by resolution of the House of Representatives and resolution of the Senate on 20 August 2026. Committee: Artificial Intelligence Sub...
000
Graham Greenleaf @grahamgreenleaf.bsky.social · 06/08/2026
Yasin al Razi and I have analyzed 'Bangladesh's unconventional data privacy Ordinance' at papers.ssrn.com/abstract_id=... . It is a comprehensive law with many good protections, but other provisions ranging from the difficult-to-implement to the bizarre. One of the last 'missing' laws in Asia.
papers.ssrn.com
Bangladesh's unconventional data privacy Ordinance
<div> <p>Bangladesh is the world's eighth most populous country with over 170 million people. An interim government led by Nobel prize-winning economist Muhamm
000
Graham Greenleaf @grahamgreenleaf.bsky.social · 06/08/2026
'Korea's PIPA: Still the toughest data privacy law in Asia' papers.ssrn.com/abstract_id=... continues my tracking of this innovative law over the last 14 years. It leads the GDPR in some respects.
papers.ssrn.com
Page Cannot be Found
011
Graham Greenleaf @grahamgreenleaf.bsky.social · 17/07/2026
SSRN to Sunset Rankings - www.ssrn.com/ssrn/ranking... SSRN cites difficulties with ranking law schools as its reason, but this change also seems to affect lists ranking individual scholars, which are no longer accessible.
ssrn.com
SSRN Home Page
000
Graham Greenleaf @grahamgreenleaf.bsky.social · 15/06/2026
The website for the 2026 Law via Internet Conference (LVI 2026) and meeting of the Free Access to Law Movement (FALM) is at en.lvi2026.org scheduled for 12-14 October. The Call for Papers is there, with a deadline for abstracts of 21 July.
en.lvi2026.org
LVI 2026 | Law Via the Internet Conference in Montreal
Attend LVI 2026 in Montreal, Canada, from October 12–14, 2026. Connect with legal information professionals, researchers, and innovators shaping the future of open access to law.
002
Graham Greenleaf @grahamgreenleaf.bsky.social · 08/06/2026
Congratulations to Joanna Mendelssohn @oldlillipilli.bsky.social for today (the King's Birthday) being made a Member of the Order of Australia (AM). Well deserved, Joanna, for all your contributions to art, education and much more. Probably won't make you a monarchist, however ...
120
Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2026
Thanks to SSRN for the detailed & informative reply. Great that published work can be submitted as at present. SSRN will offer 'ability to select' any one of 3 CC BY licences, but why do we need to choose any BY licence? The current position (author keeps ©; only licence is to SSRN) is OK by me.
000
Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2026
A paper by me and Andin Aditya Rahman on two Indonesian Constitutional Court (MKRI) cases which challenge the PDP Law's provisions on data exports & on unlawful disclosures papers.ssrn.com/abstract_id=... . (It might be the last paper I put on SSRN ... see other post today.)
papers.ssrn.com
Indonesian Constitutional Cases Challenge PDP Law
<p>A two-year grace period has come and gone since Indonesia’s first omnibus <i>Personal Data Protection Act</i> (PDP Law) was enacted in 2022 and the law came
020
Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2026
Does anyone on BlueSky know where to find SSRN documents on this policy change? It is so stupid I am starting to wonder whether some misinterpretation may be involved. Or is Elsevier just intent on destroying SSRN?
100
Graham Greenleaf @grahamgreenleaf.bsky.social · 04/06/2026
If Stephen Bainbridge is correct then SSRN's new policy is horrendous news for free access to legal scholarship (and all other fields). We need to see the SSRN source documents.
020
Graham Greenleaf @grahamgreenleaf.bsky.social · 04/06/2026
My short analysis of problems Meta having in India's Supreme Court is at papers.ssrn.com/abstract_id=... Both cases concern WhatsApp forcing its users to share metadata with Facebook. It is appealing a US$23.5M fine for anti-competitive conduct. The other will test the Puttaswamy 'right to privacy'.
papers.ssrn.com
India's Supreme Court threatens Meta over WhatsApp data sharing
<div> <span>What happens in India matters a great deal to Meta because India is Meta’s largest market for its WhatsApp service, with up to 853.8 million monthl
000
Reposted by Graham Greenleaf
Privacy Laws & Business @privacylaws.com · 02/06/2026
June International Report is out now, includes: • Ireland DPC prioritises AI • Vietnam’s AI law now in force • Korea’s PIPA: Still Asia’s toughest • Demystifying EU Digital Identity • Generative AI and children + much more... www.privacylaws.com/reports-gate...
privacylaws.com
International Report June 2026
Includes:<br> <br> - Ireland DPC prioritises AI<br> - Vietnam’s AI law now in force<br> - Korea’s PIPA: Still Asia’s toughest<br> - Demystifying EU Digital Identity<br> - Generative AI and children
001
Graham Greenleaf @grahamgreenleaf.bsky.social · 31/05/2026
On 15 May Moldova became the 34th state to ratify CoE data privacy Convention 108+ (the 'modernised' Convention 108), leaving only ratifications by 4 more states required for 108+ to come into force. www.coe.int/en/web/data-...
coe.int
Republic of Moldova Becomes the 34th State to Ratify the Convention 108+ - Data Protection - www.coe.int
Latest news about Council of Europe work in field of data protection
163
Graham Greenleaf @grahamgreenleaf.bsky.social · 29/05/2026
David Lindsay & I have put on SSRN 'Copyright’s public domains: The limits on AI appropriation’ papers.ssrn.com/sol3/papers.... We apply the 15 categories of the © public domain to identify those that already expand content available for AI utilisation, & those most open to being so expanded.
papers.ssrn.com
Copyright's Public Domains: The Limits on AI Appropriation
<p></p> <p>The spectacular rise to commercial and intellectual prominence of artificial intelligence (AI) since 2022, and in particular the predominant role of
000
Graham Greenleaf @grahamgreenleaf.bsky.social · 21/04/2026
CanLII & Lexum will co-host the Law via the Internet (LVI) 2026 conference lexum.com/en/blog/save... in Montreal, on Oct 12–14, 2026. Under the theme “Trusted Past, Open Future” it will discuss the evolving landscape of legal information, including the impact of AI. Save the date.
lexum.com
Save the date: LVI 2026 in Montreal & CanLII’s 25th Anniversary | Lexum
010
Graham Greenleaf @grahamgreenleaf.bsky.social · 20/04/2026
One previously missed: Kiribati's Data Protection Act 2025 enacted August 2025, the second from a Pacific Island country (Vanuatu was first in 2024), #177 globally. Fiji & Solomons both have Bills in progress. It provides for administrative penalties, offences & compensation. @dbanisar.bsky.social
020
Graham Greenleaf @grahamgreenleaf.bsky.social · 05/04/2026
In recent paper, I ask 'The Global Trajectory of 50 Years of Data Privacy Laws: Will it Continue?' papers.ssrn.com/sol3/papers.... The question-mark is because Trump's 'Maga-speech' ideology threatens to upset the previous half-century of progress in global development of data privacy laws.
papers.ssrn.com
The Global Trajectory of 50 Years of Data Privacy Laws: Will it Continue?
<div> <p></p> <p><span>This is a very concise account of the trajectory of the global development of data privacy laws over their first 50 years, and the impa
053
Graham Greenleaf @grahamgreenleaf.bsky.social · 03/04/2026
My article 'Rules Expand India's Data Privacy Law, but Slowly’ is now available on SSRN at papers.ssrn.com/abstract_id=... . I conclude that the Rules are fair, although the Act on which they are based is biased in favour of governments and companies. Any comment / discussion is very welcome.
papers.ssrn.com
Rules Expand India's Data Privacy Law, but Slowly
<p>India’s Digital Personal Data Protection Act, 2023 is a step closer to being in force with the Ministry of Electronics and Information Technology (MEITY) mak
031
Graham Greenleaf @grahamgreenleaf.bsky.social · 19/02/2026
Dave's annual update to his data privacy laws world map is invaluable as ever - 172 as at the end of 2025. My count is 176 because I include a few that only cover the public sector. Not many left to go ...
122
Reposted by Graham Greenleaf
Pat Walshe - Privacy Matters 🇮🇪🇬🇧🇪🇺 @privacymatters.bsky.social · 28/01/2026
#DataProtectionDay 2023 I was honoured develop these guidelines for the @coe.int in 2023 ‘Data Protection Day: New guidelines to ensure that national digital identity systems respect human rights standards’ www.coe.int/en/web/human... #NationalDigitalIdentity
coe.int
Data Protection Day: New guidelines to ensure that national digital identity systems respect human rights standards - Human Rights and Rule of Law - www.coe.int
Latest news from the Directorate General Human Rights and Rule of Law
034
Graham Greenleaf @grahamgreenleaf.bsky.social · 28/01/2026
28 Jan is Data Privacy Day 2026. This year it should be not so much about celebrating achievements but rather warning of dangers and suggesting counter-measures. My contribution is 'Defending MAGA-Speech: Trump’s War on Global Data Privacy' papers.ssrn.com/abstract_id=... . Suggestions welcome.
papers.ssrn.com
Defending MAGA-Speech: Trump’s War on Global Data Privacy
In little more than six months since his second inauguration President Donald Trump has set the scene for an authoritarian regime in the US, with an aggressive
001
Graham Greenleaf @grahamgreenleaf.bsky.social · 25/01/2026
Burundi is the 176th country to adopt a data privacy law, according to various sources including techafricanews.com/2026/01/16/b... It includes an independent supervisory body. Burundi has ratified the African Union's Malabo Convention. (Thanks Dave Banisar @dbanisar.bsky.social)
techafricanews.com
Burundi Adopts Landmark Personal Data Protection Law to Safeguard Citizens in the Digital Era - TechAfrica News
A key feature of the legislation is the establishment of an independent administrative authority tasked with overseeing personal data protection.
032
Graham Greenleaf @grahamgreenleaf.bsky.social · 19/01/2026
Bangladesh is one of the last countries in Asia to enact data privacy legislation - see Personal Data Protection Ordinance 2025; no English version available, but a useful article at www.thedailystar.net/tech-startup... (Thanks Dave Banisar @dbanisar.bsky.social)
thedailystar.net
Bangladesh’s Personal Data Protection Ordinance 2025: key takeaways
The law requires explicit consent for data collection and introduces strict rules
030
Graham Greenleaf @grahamgreenleaf.bsky.social · 08/12/2025
My 'Defending MAGA-speech: Trump’s war on global data privacy' papers.ssrn.com/abstract_id=..., is a non-US analysis of how the authoritarian Trump Administration has developed a systematic foreign & domestic policy ideology with which to attack data privacy globally. Comments much appreciated.
papers.ssrn.com
<p><span>Defending MAGA-speech: Trump’s war on global data privacy</span></p>
<p>In little more than six months since his second inauguration President Donald Trump has set the scene for an authoritarian regime in the US, with an aggressi
144
Reposted by Graham Greenleaf
Chris Marsden @chrismarsden.bsky.social · 16/11/2025
"Munich regional court sided in favour of Germany’s music rights society GEMA, which said ChatGPT had harvested protected lyrics by popular artists to “learn” from them" Paying for the lack of respect and permission www.theguardian.com/technology/2...
theguardian.com
ChatGPT violated copyright law by ‘learning’ from song lyrics, German court rules
OpenAI ordered to pay undisclosed damages for training its language models on artists’ work without permission
09932
Graham Greenleaf @grahamgreenleaf.bsky.social · 06/11/2025
In January 2025 Djibouti in the Horn of Africa became the 174th country to enact a data privacy law: the Digital Code / Code Numerique covers data privacy as well as other e-commerce & cybersecurity topics www.journalofficiel.dj/texte-juridi... Thanks Dave Banisar @dbanisar.bsky.social
journalofficiel.dj
Loi n° 019/AN/23/9ème L Portant Code Numérique - eJO
Article 1 : Le Code du Numérique est adopté. Article 2 : La présente Loi sera publiée au Journal Officiel dès sa signature. Fait à Djibouti, le 06 Juillet 2025
042
Graham Greenleaf @grahamgreenleaf.bsky.social · 29/10/2025
Were you on Facebook 10 years ago? papers.ssrn.com/abstract_id=... Meta is paying A$50M - largest ever Australian privacy breach settlement. But the clock is ticking, until only 31/12/25. Who's eligible; how to make a claim; how much the eventual payout might be: here's what you need to know.
papers.ssrn.com
Were you on Facebook 10 years ago? You may be able to claim part of this $50 million payout
Right now, more than 311,000 Australian Facebook users can apply for a slice of a A$50 million compensation fund from tech giant Meta-the largest ever payment f
010
Graham Greenleaf @grahamgreenleaf.bsky.social · 15/10/2025
2025 marks the 30th anniversary of the founding of the Australasian Legal Information Institute (AustLII). An article by its co-founders/directors Mowbray, Chung & Greenleaf in the Australian Law Journals discusses its history: papers.ssrn.com/abstract_id=...
papers.ssrn.com
AustLII – 30 Years of Free Access to Law
2025 marks the 30th anniversary of the founding of the Australasian Legal Information Institute (AustLII). AustLII has revolutionised access to law in Australia
011
Graham Greenleaf @grahamgreenleaf.bsky.social · 12/10/2025
Gambia's National Assembly passed the Personal Data Protection and Privacy Bill, 2025 on 29 September, 2025. This makes Gambia the 173rd country to enact a data privacy law. It requires Presidential assent. For the other 172 see papers.ssrn.com/abstract_id=...
papers.ssrn.com
172 Countries with Data Privacy Laws -Year by Year 1973-2025
<p>For the past 52 years, since 1973 when Sweden enacted the first national data privacy law, countries around the world have enacted new data privacy laws at a
010
Graham Greenleaf @grahamgreenleaf.bsky.social · 09/10/2025
My article on Malaysia's complex new guidelines on cross-border data transfers is at papers.ssrn.com/abstract_id=... . Still a poor law after 2024 reforms, but definitely improving.
papers.ssrn.com
Malaysia's complex new guidelines on cross-border data transfers
<p>Malaysia’s <i>Personal Data Protection Act</i> (PDPA) was one of the earliest enacted in Asia, but not brought into force until 2013. In 2024 it underwent it
020
Reposted by Graham Greenleaf
Robert Reich @rbreich.bsky.social · 23/09/2025
The real reason Disney restored Kimmel's late-night show? We, the people, have extraordinary power. Let me explain. robertreich.substack.com/p/the-deep…
robertreich.substack.com
The deeper story behind America's pending loss of free speech
The real reason Disney restored Kimmel's late-night show
842698709
Graham Greenleaf @grahamgreenleaf.bsky.social · 22/09/2025
AustLII www.austlii.edu.au (1995 - ) and the other LIIs in the Free Access to Law Movement still stick to the ideals of the 90s, survive and sometimes thrive.
austlii.edu.au
Australasian Legal Information Institute
Australasian Legal Information Institute (AustLII) - Hosted by University of Technology Sydney Faculty of Law
132
Reposted by Graham Greenleaf
Sinjut @sinjut.aus.social.ap.brid.gy · 17/09/2025
David Pope captures it beautifully.
Cartoon by David Pope titled "Tall Poppy Syndrome".
ABC reporter John Lyons stands holding a microphone amongst reporters bowing flat sycophantically before Donald Trump. Trump points at him and says "Tell the Australian Prime Minister to weed thus one out."
1123
Reposted by Graham Greenleaf
Pat Walshe - Privacy Matters 🇮🇪🇬🇧🇪🇺 @privacymatters.bsky.social · 25/06/2025
Data flows and digital repression: Civil society urges EU to reassess Israel’s adequacy status edri.org/our-work/dat...
edri.org
Civil society urges EU to reassess Israel’s adequacy status - European Digital Rights (EDRi)
The letter urges the European Commission to reassess Israel’s data protection adequacy status under the GDPR.
0179
Reposted by Graham Greenleaf
Robert Reich @rbreich.bsky.social · 25/08/2025
Sending troops into US cities against their will. Strong-arming corporations and extracting gifts in exchange for tariff exemptions. Calling on state governments to gerrymander in his favor. Trump is the "big government" nightmare conservatives have always warned us about.
13940211372
Graham Greenleaf @grahamgreenleaf.bsky.social · 13/08/2025
Cambodia's Post & Telecoms Ministry has released a draft law on personal data protection in July 2025. Still no DPA, and relies on dozens of prakas (regs) being made. See my article on the 2023 Bill: papers.ssrn.com/sol3/papers.... May be better than nothing, but maybe not if there is no enforcement
papers.ssrn.com
Cambodia's Draft Data Privacy Law: Too Much is Left to Delegated Prakas
Cambodia is one of the last four of the eleven ASEAN countries that has not enacted a data privacy law. Cambodia’s Ministry of Posts and Telecommunications (MPT
050
Graham Greenleaf @grahamgreenleaf.bsky.social · 12/08/2025
Dave's map is accurate for the 166 'comprehensive' laws. Add laws restricted to either the private sector (Singapore, Malaysia, Brunei, Bahrain, China, UAE, Vietnam, Qatar), or only the public sector (Yemen), & you get 172 countries with data privacy laws. See my papers.ssrn.com/abstract_id=...
papers.ssrn.com
Global Data Privacy Laws 2025: 172 Countries, Twelve New in 2023/24
This biennial global assessment is the 9th in this publication since 2011. Each assessment has been accompanied by detailed tables listing key features of all t
130
Reposted by Graham Greenleaf
Norman @noaasm.bsky.social · 11/08/2025
Same goes for GCC jurisidtions, such as the UAE (including that of DIFC, ADGM), KSA, Qatar, Oman etc
031
Graham Greenleaf @grahamgreenleaf.bsky.social · 12/08/2025
This map is just ignorant concerning the many African and Latin American countries with data privacy laws, and under-estimates the influence of the GDPR elsewhere. 172 countries have such laws. Dave Banisar's map - see Post following - is much more accurate on the extent of countries with laws.
120
Graham Greenleaf @grahamgreenleaf.bsky.social · 11/08/2025
Apology: correct URL is papers.ssrn.com/sol3/papers....
papers.ssrn.com
Global data privacy 2025: International agreements stall
<p>What progress has been made on global and regional data privacy agreements in the last two years (2023-24)? The previous biennial review (2021-22) concluded
010
Graham Greenleaf @grahamgreenleaf.bsky.social · 10/08/2025
My article 'Global data privacy 2025: International agreements stall' at download.ssrn.com/2025/8/10/53... surveys 2023-24's hi-spots: EU adequacy slo-mo; 108+ non-ratification; Malabo Convention stuck at 16/55 AU; ECOWAS withdrawals; CBPRs as dead parrot; CPTPP with added Brexit; RCEP uber FTAs.
download.ssrn.com
031
Graham Greenleaf @grahamgreenleaf.bsky.social · 10/08/2025
AustLII (www.austlii.edu.au) will host the 22nd Law Via Internet Conference (Nov 13-14, Sydney) lvi2025.org. 24 presenters are listed on a new Conference Program page lvi2025.org/program/. Further submissions of abstracts are open until 31 August lvi2025.org/callforpapers/. Registration is open.
lvi2025.org
LVI 2025: Program & Speakers | Law via the Internet Conference 12-14 November 2025
Connect with a diverse international community of legal professionals, technologists, policymakers, and researchers.
001
Reposted by Graham Greenleaf
David Banisar @dbanisar.bsky.social · 30/07/2025
BSA now supports comprehensive privacy laws, and is horrified by states adopting new (outrageous) laws that actually gives consumers some rights. So not really a good or even comprehensive law, or probably a law at all really. I’m feeling a certain sense of deja vu all over again.
102
Reposted by Graham Greenleaf
David Banisar @dbanisar.bsky.social · 30/07/2025
Important hearing discussing need for comprehensive privacy protections in US just starting.
241
Graham Greenleaf @grahamgreenleaf.bsky.social · 07/06/2025
172 countries have now enacted data privacy laws by, 12 new in 2023/24 (+ Brunei in 2025). At the current growth rate of 5.2 p/a, they could be universal in 8 years, but some (N.Korea?) will resist. GDPR influence still dominates. My paper analysing the changes is at papers.ssrn.com/abstract_id=...
papers.ssrn.com
Global Data Privacy Laws 2025: 172 Countries, Twelve New in 2023/24
This biennial global assessment is the 9th in this publication since 2011. Each assessment has been accompanied by detailed tables listing key features of all t
031
Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2025
AustLII is hosting the 2025 Law via Internet Conference (LVI 2025 lvi2025.org), 'Empowering a just society through legal information, policy, technology, & practice', in Sydney in November. The Call for Papers closes on 21 July & registration is now open. It will be beach weather - bring your togs!
lvi2025.org
141
Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2025
'Free Access to Law and Digital Court Decisions in Australia: Reflections and Future Directions', mainly about AustLII's contributions, is by Andrew Mowbray, Philip Chung and me, at papers.ssrn.com/abstract_id=...
papers.ssrn.com
Free Access to Law and Digital Court Decisions in Australia: Reflections and Future Directions
Digital copies of court decisions have become such an essential and assumed part of Australia's legal system that it is worth reflecting on how the present aros
012
Graham Greenleaf @grahamgreenleaf.bsky.social · 21/05/2025
This is so fundamental: they are designed to tell you what they surmise you would expect to hear next. Not what is true. The two often coincide, but that is not a good place to start.
42410
Graham Greenleaf @grahamgreenleaf.bsky.social · 13/05/2025
5 more ratifications of 108+ required for it to come into force. Maybe this year.
021
Reposted by Graham Greenleaf
Privacy Laws & Business @privacylaws.com · 12/05/2025
It's 50+ years since the first national data protection law in Sweden @grahamgreenleaf.bsky.social traces the impact over this period and identifies the current significance of data privacy laws in an increasingly digital world Full programme: www.events.privacylaws.com#/agenda?day=... #plb2025
021