Search results

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: […]

[…] small or if keys are compromised. Secure implementation requires strong, unique salts per record and careful key management. Pseudonymization: As defined earlier, identifiers are replaced with artificial codes or pseudonyms. The link between the pseudonym and the real identity is maintained (often separately), allowing potential re-identification. k-Anonymity: This is a formal privacy model, not […]

[…] like “personal information” and “operator,” but in a few instances switches to “personal data” and “controller,” perhaps from borrowing language from more modern privacy laws like the Virginia Consumer Data Protection Act.     The substantive data minimization trend continues While the federal COPPA framework is largely focused on consent, former Commissioner Slaughter noted in 2022 […]

[…] fragmentation of the cross-border data transfer landscape globally and in APAC into clusters of likeminded jurisdictions, ranging from those like Singapore and Japan that are working to promote trusted data flows (especially through initiatives like the Global CBPRs) to those like Indonesia, India, and Vietnam that have recently renewed their interest in adopting data […]

[…] research and evaluation: Ongoing African-led research is needed to assess new risks arising from AI development and use in Africa; evaluate the efficacy of governance tools to promote the development and use of AI systems that are inclusive, fair, sustainable, and just; review best practices in AI governance coming out of similar country contexts […]

[…] its provisions to enhance children’s privacy and safety on online platforms. This policy priority has equally reflected in the data protection field, with DPAs working together to promote child protection in advertising and recently fining social media companies for GDPR violations when processing children’s data. Other key developments include the upcoming  EDPB guidelines on […]

[…] use that indicate or encourage addiction-like behaviors by minors. (3) Physical violence, online bullying, and harassment of the minor. (4) Sexual exploitation and abuse of minors. (5) Promotion and marketing of narcotic drugs (as defined in section 102 of the Controlled Substances Act (21 U.S.C. 802)), tobacco products, gambling, or alcohol. (6) Predatory, unfair, […]

[…] the law’s provisions but also their constitutionality.  Read our Analysis of The California Age-Appropriate Design Code and a Comparative Analysis of the California and UK Age-Appropriate Design Codes on our website.  The Timeline of Events:  The California AADC was introduced in the California Assembly as AB 2273 in February 2022, passed the legislature, and […]

[…] and violence material, and drug-related material (collectively, “class 1A” and “class 1B” material). These final standards address Designated Internet Services and Relevant Electronic Services, joining six other codes covering other categories of services.  In October 2023, prior to the publication of the draft industry standards, FPF hosted a roundtable conversation with expert contributors from […]