iiinova — where your digital self keeps evolving

Graham Greenleaf

@grahamgreenleaf.bsky.social

367 followers 42 following 69 posts

Australian academic in law & infotech. Hon. Professor Macquarie University, Sydney, Australia; Co-Founder & Senior Researcher, AustLII. Posts are in individual capacity only, not for Macquarie or AustLII. Details at www2.austlii.edu.au/~graham

Posts Replies Media

Graham Greenleaf @grahamgreenleaf.bsky.social · 02/10/2026

It's been 5 months since I reported a new data privacy law (thanks to @dbanisar.bsky.social ). Liberia's Data Protection and Privacy Act (Tue 15 Sept 2026 at mail.emansion.gov.lr/general/publ... ) is from country #178 globally. It enacts the ECOWAS Supplementary Act on Personal Data Protection.

ail.emansion.gov.lr

Graham Greenleaf @grahamgreenleaf.bsky.social · 21/08/2026

Australia's Federal Parliament has established a Joint Select Committee on Artificial Intelligence with detailed Terms of Reference www.aph.gov.au/Parliamentar... . It is due to report by 30 Nov 2026. No date for submissions yet set. @luizajarovsky.bsky.social

Joint Select Committee on Artificial Intelligence

The Joint Select Committee on Artificial Intelligence was appointed by resolution of the House of Representatives and resolution of the Senate on 20 August 2026. Committee: Artificial Intelligence Sub...

Graham Greenleaf @grahamgreenleaf.bsky.social · 06/08/2026

Yasin al Razi and I have analyzed 'Bangladesh's unconventional data privacy Ordinance' at papers.ssrn.com/abstract_id=... . It is a comprehensive law with many good protections, but other provisions ranging from the difficult-to-implement to the bizarre. One of the last 'missing' laws in Asia.

papers.ssrn.com

Bangladesh's unconventional data privacy Ordinance

<div> <p>Bangladesh is the world's eighth most populous country with over 170 million people. An interim government led by Nobel prize-winning economist Muhamm

000

Graham Greenleaf @grahamgreenleaf.bsky.social · 06/08/2026

'Korea's PIPA: Still the toughest data privacy law in Asia' papers.ssrn.com/abstract_id=... continues my tracking of this innovative law over the last 14 years. It leads the GDPR in some respects.

papers.ssrn.com

Page Cannot be Found

Graham Greenleaf @grahamgreenleaf.bsky.social · 17/07/2026

SSRN to Sunset Rankings - www.ssrn.com/ssrn/ranking... SSRN cites difficulties with ranking law schools as its reason, but this change also seems to affect lists ranking individual scholars, which are no longer accessible.

000

Graham Greenleaf @grahamgreenleaf.bsky.social · 15/06/2026

The website for the 2026 Law via Internet Conference (LVI 2026) and meeting of the Free Access to Law Movement (FALM) is at en.lvi2026.org scheduled for 12-14 October. The Call for Papers is there, with a deadline for abstracts of 21 July.

LVI 2026 | Law Via the Internet Conference in Montreal

Attend LVI 2026 in Montreal, Canada, from October 12–14, 2026. Connect with legal information professionals, researchers, and innovators shaping the future of open access to law.

Graham Greenleaf @grahamgreenleaf.bsky.social · 08/06/2026

Congratulations to Joanna Mendelssohn @oldlillipilli.bsky.social for today (the King's Birthday) being made a Member of the Order of Australia (AM). Well deserved, Joanna, for all your contributions to art, education and much more. Probably won't make you a monarchist, however ...

Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2026

Thanks to SSRN for the detailed & informative reply. Great that published work can be submitted as at present. SSRN will offer 'ability to select' any one of 3 CC BY licences, but why do we need to choose any BY licence? The current position (author keeps ©; only licence is to SSRN) is OK by me.

000

Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2026

A paper by me and Andin Aditya Rahman on two Indonesian Constitutional Court (MKRI) cases which challenge the PDP Law's provisions on data exports & on unlawful disclosures papers.ssrn.com/abstract_id=... . (It might be the last paper I put on SSRN ... see other post today.)

papers.ssrn.com

Indonesian Constitutional Cases Challenge PDP Law

<p>A two-year grace period has come and gone since Indonesia’s first omnibus <i>Personal Data Protection Act</i> (PDP Law) was enacted in 2022 and the law came

Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2026

Does anyone on BlueSky know where to find SSRN documents on this policy change? It is so stupid I am starting to wonder whether some misinterpretation may be involved. Or is Elsevier just intent on destroying SSRN?

100

Graham Greenleaf @grahamgreenleaf.bsky.social · 04/06/2026

If Stephen Bainbridge is correct then SSRN's new policy is horrendous news for free access to legal scholarship (and all other fields). We need to see the SSRN source documents.

Graham Greenleaf @grahamgreenleaf.bsky.social · 04/06/2026

My short analysis of problems Meta having in India's Supreme Court is at papers.ssrn.com/abstract_id=... Both cases concern WhatsApp forcing its users to share metadata with Facebook. It is appealing a US$23.5M fine for anti-competitive conduct. The other will test the Puttaswamy 'right to privacy'.

papers.ssrn.com

India's Supreme Court threatens Meta over WhatsApp data sharing

<div> <span>What happens in India matters a great deal to Meta because India is Meta’s largest market for its WhatsApp service, with up to 853.8 million monthl

000

Reposted by Graham Greenleaf

Privacy Laws & Business @privacylaws.com · 02/06/2026

June International Report is out now, includes: • Ireland DPC prioritises AI • Vietnam’s AI law now in force • Korea’s PIPA: Still Asia’s toughest • Demystifying EU Digital Identity • Generative AI and children + much more... www.privacylaws.com/reports-gate...

privacylaws.com

International Report June 2026

Includes:<br> <br> - Ireland DPC prioritises AI<br> - Vietnam’s AI law now in force<br> - Korea’s PIPA: Still Asia’s toughest<br> - Demystifying EU Digital Identity<br> - Generative AI and children

Graham Greenleaf @grahamgreenleaf.bsky.social · 31/05/2026

On 15 May Moldova became the 34th state to ratify CoE data privacy Convention 108+ (the 'modernised' Convention 108), leaving only ratifications by 4 more states required for 108+ to come into force. www.coe.int/en/web/data-...

Republic of Moldova Becomes the 34th State to Ratify the Convention 108+ - Data Protection - www.coe.int

Latest news about Council of Europe work in field of data protection

Graham Greenleaf @grahamgreenleaf.bsky.social · 29/05/2026

David Lindsay & I have put on SSRN 'Copyright’s public domains: The limits on AI appropriation’ papers.ssrn.com/sol3/papers.... We apply the 15 categories of the © public domain to identify those that already expand content available for AI utilisation, & those most open to being so expanded.

papers.ssrn.com

Copyright's Public Domains: The Limits on AI Appropriation

<p></p> <p>The spectacular rise to commercial and intellectual prominence of artificial intelligence (AI) since 2022, and in particular the predominant role of

000

Graham Greenleaf @grahamgreenleaf.bsky.social · 21/04/2026

CanLII & Lexum will co-host the Law via the Internet (LVI) 2026 conference lexum.com/en/blog/save... in Montreal, on Oct 12–14, 2026. Under the theme “Trusted Past, Open Future” it will discuss the evolving landscape of legal information, including the impact of AI. Save the date.

Save the date: LVI 2026 in Montreal & CanLII’s 25th Anniversary | Lexum

Graham Greenleaf @grahamgreenleaf.bsky.social · 20/04/2026

One previously missed: Kiribati's Data Protection Act 2025 enacted August 2025, the second from a Pacific Island country (Vanuatu was first in 2024), #177 globally. Fiji & Solomons both have Bills in progress. It provides for administrative penalties, offences & compensation. @dbanisar.bsky.social

Graham Greenleaf @grahamgreenleaf.bsky.social · 05/04/2026

In recent paper, I ask 'The Global Trajectory of 50 Years of Data Privacy Laws: Will it Continue?' papers.ssrn.com/sol3/papers.... The question-mark is because Trump's 'Maga-speech' ideology threatens to upset the previous half-century of progress in global development of data privacy laws.

papers.ssrn.com

The Global Trajectory of 50 Years of Data Privacy Laws: Will it Continue?

<div> <p></p> <p><span>This is a very concise account of the trajectory of the global development of data privacy laws over their first 50 years, and the impa

Graham Greenleaf @grahamgreenleaf.bsky.social · 03/04/2026

My article 'Rules Expand India's Data Privacy Law, but Slowly’ is now available on SSRN at papers.ssrn.com/abstract_id=... . I conclude that the Rules are fair, although the Act on which they are based is biased in favour of governments and companies. Any comment / discussion is very welcome.

papers.ssrn.com

Rules Expand India's Data Privacy Law, but Slowly

<p>India’s Digital Personal Data Protection Act, 2023 is a step closer to being in force with the Ministry of Electronics and Information Technology (MEITY) mak

Graham Greenleaf @grahamgreenleaf.bsky.social · 19/02/2026

Dave's annual update to his data privacy laws world map is invaluable as ever - 172 as at the end of 2025. My count is 176 because I include a few that only cover the public sector. Not many left to go ...

Reposted by Graham Greenleaf

Pat Walshe - Privacy Matters 🇮🇪🇬🇧🇪🇺 @privacymatters.bsky.social · 28/01/2026

#DataProtectionDay 2023 I was honoured develop these guidelines for the @coe.int in 2023 ‘Data Protection Day: New guidelines to ensure that national digital identity systems respect human rights standards’ www.coe.int/en/web/human... #NationalDigitalIdentity

Data Protection Day: New guidelines to ensure that national digital identity systems respect human rights standards - Human Rights and Rule of Law - www.coe.int

Latest news from the Directorate General Human Rights and Rule of Law

Graham Greenleaf @grahamgreenleaf.bsky.social · 28/01/2026

28 Jan is Data Privacy Day 2026. This year it should be not so much about celebrating achievements but rather warning of dangers and suggesting counter-measures. My contribution is 'Defending MAGA-Speech: Trump’s War on Global Data Privacy' papers.ssrn.com/abstract_id=... . Suggestions welcome.

papers.ssrn.com

Defending MAGA-Speech: Trump’s War on Global Data Privacy

In little more than six months since his second inauguration President Donald Trump has set the scene for an authoritarian regime in the US, with an aggressive

Graham Greenleaf @grahamgreenleaf.bsky.social · 25/01/2026

Burundi is the 176th country to adopt a data privacy law, according to various sources including techafricanews.com/2026/01/16/b... It includes an independent supervisory body. Burundi has ratified the African Union's Malabo Convention. (Thanks Dave Banisar @dbanisar.bsky.social)

techafricanews.com

Burundi Adopts Landmark Personal Data Protection Law to Safeguard Citizens in the Digital Era - TechAfrica News

A key feature of the legislation is the establishment of an independent administrative authority tasked with overseeing personal data protection.

Graham Greenleaf @grahamgreenleaf.bsky.social · 19/01/2026

Bangladesh is one of the last countries in Asia to enact data privacy legislation - see Personal Data Protection Ordinance 2025; no English version available, but a useful article at www.thedailystar.net/tech-startup... (Thanks Dave Banisar @dbanisar.bsky.social)

thedailystar.net

Bangladesh’s Personal Data Protection Ordinance 2025: key takeaways

The law requires explicit consent for data collection and introduces strict rules

Graham Greenleaf @grahamgreenleaf.bsky.social · 08/12/2025

My 'Defending MAGA-speech: Trump’s war on global data privacy' papers.ssrn.com/abstract_id=..., is a non-US analysis of how the authoritarian Trump Administration has developed a systematic foreign & domestic policy ideology with which to attack data privacy globally. Comments much appreciated.

papers.ssrn.com

<p><span>Defending MAGA-speech: Trump’s war on global data privacy</span></p>

<p>In little more than six months since his second inauguration President Donald Trump has set the scene for an authoritarian regime in the US, with an aggressi

Reposted by Graham Greenleaf

Chris Marsden @chrismarsden.bsky.social · 16/11/2025

"Munich regional court sided in favour of Germany’s music rights society GEMA, which said ChatGPT had harvested protected lyrics by popular artists to “learn” from them" Paying for the lack of respect and permission www.theguardian.com/technology/2...

theguardian.com

ChatGPT violated copyright law by ‘learning’ from song lyrics, German court rules

OpenAI ordered to pay undisclosed damages for training its language models on artists’ work without permission

Graham Greenleaf @grahamgreenleaf.bsky.social · 06/11/2025

In January 2025 Djibouti in the Horn of Africa became the 174th country to enact a data privacy law: the Digital Code / Code Numerique covers data privacy as well as other e-commerce & cybersecurity topics www.journalofficiel.dj/texte-juridi... Thanks Dave Banisar @dbanisar.bsky.social

journalofficiel.dj

Loi n° 019/AN/23/9ème L Portant Code Numérique - eJO

Article 1 : Le Code du Numérique est adopté. Article 2 : La présente Loi sera publiée au Journal Officiel dès sa signature. Fait à Djibouti, le 06 Juillet 2025

Graham Greenleaf @grahamgreenleaf.bsky.social · 29/10/2025

Were you on Facebook 10 years ago? papers.ssrn.com/abstract_id=... Meta is paying A$50M - largest ever Australian privacy breach settlement. But the clock is ticking, until only 31/12/25. Who's eligible; how to make a claim; how much the eventual payout might be: here's what you need to know.

papers.ssrn.com

Were you on Facebook 10 years ago? You may be able to claim part of this $50 million payout

Right now, more than 311,000 Australian Facebook users can apply for a slice of a A$50 million compensation fund from tech giant Meta-the largest ever payment f

Graham Greenleaf @grahamgreenleaf.bsky.social · 15/10/2025

2025 marks the 30th anniversary of the founding of the Australasian Legal Information Institute (AustLII). An article by its co-founders/directors Mowbray, Chung & Greenleaf in the Australian Law Journals discusses its history: papers.ssrn.com/abstract_id=...

papers.ssrn.com

AustLII – 30 Years of Free Access to Law

2025 marks the 30th anniversary of the founding of the Australasian Legal Information Institute (AustLII). AustLII has revolutionised access to law in Australia

Graham Greenleaf @grahamgreenleaf.bsky.social · 12/10/2025

Gambia's National Assembly passed the Personal Data Protection and Privacy Bill, 2025 on 29 September, 2025. This makes Gambia the 173rd country to enact a data privacy law. It requires Presidential assent. For the other 172 see papers.ssrn.com/abstract_id=...

papers.ssrn.com

172 Countries with Data Privacy Laws -Year by Year 1973-2025

<p>For the past 52 years, since 1973 when Sweden enacted the first national data privacy law, countries around the world have enacted new data privacy laws at a

Graham Greenleaf @grahamgreenleaf.bsky.social · 09/10/2025

My article on Malaysia's complex new guidelines on cross-border data transfers is at papers.ssrn.com/abstract_id=... . Still a poor law after 2024 reforms, but definitely improving.

papers.ssrn.com

Malaysia's complex new guidelines on cross-border data transfers

<p>Malaysia’s <i>Personal Data Protection Act</i> (PDPA) was one of the earliest enacted in Asia, but not brought into force until 2013. In 2024 it underwent it

Reposted by Graham Greenleaf

Robert Reich @rbreich.bsky.social · 23/09/2025

The real reason Disney restored Kimmel's late-night show? We, the people, have extraordinary power. Let me explain. robertreich.substack.com/p/the-deep…

robertreich.substack.com

The deeper story behind America's pending loss of free speech

The real reason Disney restored Kimmel's late-night show

Graham Greenleaf @grahamgreenleaf.bsky.social · 22/09/2025

AustLII www.austlii.edu.au (1995 - ) and the other LIIs in the Free Access to Law Movement still stick to the ideals of the 90s, survive and sometimes thrive.

Australasian Legal Information Institute

Australasian Legal Information Institute (AustLII) - Hosted by University of Technology Sydney Faculty of Law

Reposted by Graham Greenleaf

Sinjut @sinjut.aus.social.ap.brid.gy · 17/09/2025

David Pope captures it beautifully.

Cartoon by David Pope titled "Tall Poppy Syndrome".
ABC reporter John Lyons stands holding a microphone amongst reporters bowing flat sycophantically before Donald Trump. Trump points at him and says "Tell the Australian Prime Minister to weed thus one out."

Reposted by Graham Greenleaf

Pat Walshe - Privacy Matters 🇮🇪🇬🇧🇪🇺 @privacymatters.bsky.social · 25/06/2025

Data flows and digital repression: Civil society urges EU to reassess Israel’s adequacy status edri.org/our-work/dat...

Civil society urges EU to reassess Israel’s adequacy status - European Digital Rights (EDRi)

The letter urges the European Commission to reassess Israel’s data protection adequacy status under the GDPR.

Reposted by Graham Greenleaf

Robert Reich @rbreich.bsky.social · 25/08/2025

Sending troops into US cities against their will. Strong-arming corporations and extracting gifts in exchange for tariff exemptions. Calling on state governments to gerrymander in his favor. Trump is the "big government" nightmare conservatives have always warned us about.

Graham Greenleaf @grahamgreenleaf.bsky.social · 13/08/2025

Cambodia's Post & Telecoms Ministry has released a draft law on personal data protection in July 2025. Still no DPA, and relies on dozens of prakas (regs) being made. See my article on the 2023 Bill: papers.ssrn.com/sol3/papers.... May be better than nothing, but maybe not if there is no enforcement

papers.ssrn.com

Cambodia's Draft Data Privacy Law: Too Much is Left to Delegated Prakas

Cambodia is one of the last four of the eleven ASEAN countries that has not enacted a data privacy law. Cambodia’s Ministry of Posts and Telecommunications (MPT

Graham Greenleaf @grahamgreenleaf.bsky.social · 12/08/2025

Dave's map is accurate for the 166 'comprehensive' laws. Add laws restricted to either the private sector (Singapore, Malaysia, Brunei, Bahrain, China, UAE, Vietnam, Qatar), or only the public sector (Yemen), & you get 172 countries with data privacy laws. See my papers.ssrn.com/abstract_id=...

papers.ssrn.com

Global Data Privacy Laws 2025: 172 Countries, Twelve New in 2023/24

This biennial global assessment is the 9th in this publication since 2011. Each assessment has been accompanied by detailed tables listing key features of all t

Reposted by Graham Greenleaf

Norman @noaasm.bsky.social · 11/08/2025

Same goes for GCC jurisidtions, such as the UAE (including that of DIFC, ADGM), KSA, Qatar, Oman etc

Graham Greenleaf @grahamgreenleaf.bsky.social · 12/08/2025

This map is just ignorant concerning the many African and Latin American countries with data privacy laws, and under-estimates the influence of the GDPR elsewhere. 172 countries have such laws. Dave Banisar's map - see Post following - is much more accurate on the extent of countries with laws.

Graham Greenleaf @grahamgreenleaf.bsky.social · 11/08/2025

Apology: correct URL is papers.ssrn.com/sol3/papers....

papers.ssrn.com

Global data privacy 2025: International agreements stall

<p>What progress has been made on global and regional data privacy agreements in the last two years (2023-24)? The previous biennial review (2021-22) concluded

Graham Greenleaf @grahamgreenleaf.bsky.social · 10/08/2025

My article 'Global data privacy 2025: International agreements stall' at download.ssrn.com/2025/8/10/53... surveys 2023-24's hi-spots: EU adequacy slo-mo; 108+ non-ratification; Malabo Convention stuck at 16/55 AU; ECOWAS withdrawals; CBPRs as dead parrot; CPTPP with added Brexit; RCEP uber FTAs.

download.ssrn.com

Graham Greenleaf @grahamgreenleaf.bsky.social · 10/08/2025

AustLII (www.austlii.edu.au) will host the 22nd Law Via Internet Conference (Nov 13-14, Sydney) lvi2025.org. 24 presenters are listed on a new Conference Program page lvi2025.org/program/. Further submissions of abstracts are open until 31 August lvi2025.org/callforpapers/. Registration is open.

LVI 2025: Program & Speakers | Law via the Internet Conference 12-14 November 2025

Connect with a diverse international community of legal professionals, technologists, policymakers, and researchers.

Reposted by Graham Greenleaf

David Banisar @dbanisar.bsky.social · 30/07/2025

BSA now supports comprehensive privacy laws, and is horrified by states adopting new (outrageous) laws that actually gives consumers some rights. So not really a good or even comprehensive law, or probably a law at all really. I’m feeling a certain sense of deja vu all over again.

Reposted by Graham Greenleaf

David Banisar @dbanisar.bsky.social · 30/07/2025

Important hearing discussing need for comprehensive privacy protections in US just starting.

Graham Greenleaf @grahamgreenleaf.bsky.social · 25/07/2025

The LvI 2025 Conference to be hosted by AustLII has extended the date for abstract submissions to 31/08/25 lvi2025.org/callforpapers/ and halved the registration fee secure.austlii.edu.au/cgi-egate/re... . Both will make the conference bigger and better. Please join us in Sydney in November, 12-14.

000

Graham Greenleaf @grahamgreenleaf.bsky.social · 07/06/2025

172 countries have now enacted data privacy laws by, 12 new in 2023/24 (+ Brunei in 2025). At the current growth rate of 5.2 p/a, they could be universal in 8 years, but some (N.Korea?) will resist. GDPR influence still dominates. My paper analysing the changes is at papers.ssrn.com/abstract_id=...

papers.ssrn.com

Global Data Privacy Laws 2025: 172 Countries, Twelve New in 2023/24

This biennial global assessment is the 9th in this publication since 2011. Each assessment has been accompanied by detailed tables listing key features of all t

Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2025

AustLII is hosting the 2025 Law via Internet Conference (LVI 2025 lvi2025.org), 'Empowering a just society through legal information, policy, technology, & practice', in Sydney in November. The Call for Papers closes on 21 July & registration is now open. It will be beach weather - bring your togs!

Graham Greenleaf @grahamgreenleaf.bsky.social · 05/06/2025

'Free Access to Law and Digital Court Decisions in Australia: Reflections and Future Directions', mainly about AustLII's contributions, is by Andrew Mowbray, Philip Chung and me, at papers.ssrn.com/abstract_id=...

papers.ssrn.com

Free Access to Law and Digital Court Decisions in Australia: Reflections and Future Directions

Digital copies of court decisions have become such an essential and assumed part of Australia's legal system that it is worth reflecting on how the present aros

Graham Greenleaf @grahamgreenleaf.bsky.social · 21/05/2025

This is so fundamental: they are designed to tell you what they surmise you would expect to hear next. Not what is true. The two often coincide, but that is not a good place to start.