Search results

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: […]

[…] high utility loss for QIs) Masking Obscure parts of data values (e.g., XXXX) Obscure direct identifiers Simple; Preserves format Limited privacy protection; Can reduce utility; Hard for free text Low (Insufficient for QIs in queries) Generalization Replace specific values with broader categories Reduce identifiability via QIs Basis for k-anonymity Significant utility loss, especially in […]

[…] like “personal information” and “operator,” but in a few instances switches to “personal data” and “controller,” perhaps from borrowing language from more modern privacy laws like the Virginia Consumer Data Protection Act.     The substantive data minimization trend continues While the federal COPPA framework is largely focused on consent, former Commissioner Slaughter noted in 2022 […]

[…] while scraping has long existed in a legal gray area, the rise of AI has heightened privacy concerns. He challenged the perception that publicly available data is free for unrestricted use, noting that privacy laws are evolving to address these issues. The discussion explored potential regulatory solutions, emphasizing the importance of distinguishing between beneficial […]

[…] maintains consent as the general basis for the processing of personal data – similar to how it was regulated by the former LPVP. Consent must be “ free, informed and specific as to its purpose” and given “in advance and unequivocally” by means of a verbal or written statement, or expressed through electronic means […]

[…] and the United States. Dealing with these risks requires that greater attention be paid to geopolitical crises and legal fragmentation as a threat to protections for the free flow of data across borders.  The end of the ‘Brussels effect’? There has been much talk of the ‘Brussels effect’ that has allowed the EU to […]

[…] privacy professionals. The event will be held on Wednesday, March 12, 2025 at FPF Headquarters, 1350 I St, Suite 200, NW, Washington, D.C. 20005. This event is free and open to the general public. Register for this event by clicking here! To learn more about the 14th Annual Privacy Papers for Policymakers, click here. […]

[…] must undergo a serious reckoning with privacy law. Scraping has evaded a reckoning with privacy law largely because scrapers act as if all publicly available data were free for the taking. But the public availability of scraped data shouldn’t give scrapers a free pass. Privacy law regularly protects publicly available data, and privacy principles […]

[…] fragmentation of the cross-border data transfer landscape globally and in APAC into clusters of likeminded jurisdictions, ranging from those like Singapore and Japan that are working to promote trusted data flows (especially through initiatives like the Global CBPRs) to those like Indonesia, India, and Vietnam that have recently renewed their interest in adopting data […]

[…] AI legislation. Maryland passed the  Maryland Online Data Privacy Act (MODPA) as well as the Maryland Age-Appropriate Design Code Act” (Maryland AADC).  Following Connecticut’s lead last year, Virginia and Colorado both amended their state privacy laws to add specific online protections for kids’ data. FPF also examined genetic privacy laws from Montana, Tennessee, Texas, […]