FPF Unveils Paper on State Data Minimization Trends
Today, the Future of Privacy Forum (FPF) published a new paper—Data Minimization’s Substantive Turn: Key Questions & Operational Challenges Posed by New State Privacy Legislation. Data minimization is a bedrock principle of privacy and data protection law, with origins in the Fair Information Practice Principles (FIPPs) and the Privacy Act of 1974. At a high […]
Generative AI for Organizational Use: Internal Policy Considerations
The Future of Privacy Forum (FPF) Center for Artificial Intelligence released a newly updated version of our Generative AI internal compliance document – Generative AI for Organizational Use: Internal Policy Considerations, with new content addressing organizations’ ongoing responsibilities, specific concerns (e.g., high-risk uses), and lessons taken from recent regulatory enforcement related to these technologies. In 2023, […]
FPF Unveils Report on the Anatomy of State Comprehensive Privacy Law
The Future of Privacy Forum (FPF) launched a new report—Anatomy of State Comprehensive Privacy Law: Surveying the State Privacy Law Landscape and Recent Legislative Trends. By distilling this broad landscape to identify the “anatomy” of state comprehensive privacy law, this report highlights the strong commonalities and the nuanced differences between the various laws, showing how […]
Regulatory Strategies of Data Protection Authorities in the Asia-Pacific Region: 2024, and Beyond
The Asia-Pacific (APAC) region has emerged as a dynamic and rapidly evolving landscape for data protection regulation. As digital economies flourish and cross-border data flows intensify, data protection authorities (DPAs) across the region are grappling with complex challenges posed by technological advancements, changing business practices, and evolving societal expectations regarding privacy. This Report provides a […]
Video-Based Vehicle Safety Systems: Lessons Learned from Commercial Fleets
Recent years have seen an increasing deployment of onboard video-based safety systems in vehicles. While video technologies have been seen already in passenger vehicles, these systems have been even more prominent in the commercial fleet industry (e.g., trucking, delivery, and rental vehicles). Fleet operators have substantial regulatory, financial, and other incentives to implement safety programs, […]
Confidential Computing And Privacy: Policy Implications of Trusted Execution Environments
Confidential computing leverages two key technologies: trusted execution environments and attestation services. The technology allows organizations to restrict access to personal information, intellectual property, or sensitive or high-risk data through a secure hardware-based enclave or “trusted execution environment” (TEE). Economic sectors that have led the way in adopting confidential computing include financial services, healthcare, and […]
Best Practices for AI and Workplace Assessment Technologies
The Future of Privacy Forum, along with ADP, Indeed, LinkedIn, and Workday — leading hiring and employment software developers — released Best Practices for AI and Workplace Assessment Technologies. The Best Practices guide makes key recommendations for organizations as they develop, deploy, or increasingly rely on artificial intelligence (AI) tools in their hiring and employment decisions. Organizations are incorporating […]
The Spectrum of Artificial Intelligence Report & Infographic
The Spectrum of Artificial Intelligence – Companion to the FPF AI Infographic has been updated in June 2023 to account for the development and use of advanced generative AI tools. In December 2020, FPF published the Spectrum of Artificial Intelligence – An Infographic Tool, designed to visually display the variety and complexity of Artificial Intelligence […]
Verifiable Parental Consent Report & Infographic
Read FPF’s report on the effectiveness of a key federal children’s privacy requirement known as verifiable parental consent (VPC). The Children’s Online Privacy and Protection Act (COPPA) requires operators of child-directed services to provide parents with detailed, direct notice and obtain parents’ affirmative express consent – verifiable parental consent – before collecting personal information from […]
Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR Report
Read the Future of Privacy Forum’s report on enforcement of the EU’s GDPR Data Protection by Design and by Default (DPbD&bD) obligations, which are outlined in GDPR Article 25. The Report draws from more than 92 data protection authority (DPA) cases, court rulings, and guidelines from 16 EEA member states, the UK, and the EDPB […]