Resources

On March 4, 2025, Senator Markey reintroduced the Children and Teens’ Online Privacy Protection Act (COPPA 2.0), which was referred to the Committee on Commerce, Science, and Transportation for consideration. COPPA 2.0 would amend the Children’s Online Privacy Protection Act (COPPA), initially passed in 1998 to provide protections for teens. On June 25, 2025, the […]

Today, FPF Senior Fellow Zoe Strickland testified before the U.S. House of Representatives Financial Services Subcommittee on Financial Institutions, providing expert insight about data privacy in the financial system, focusing specifically on rulemaking under Section 1033 of the Dodd-Frank Act.  With over 25 years of experience as a global chief privacy officer at Fortune 20 […]

Today, the Future of Privacy Forum (FPF) published a new paper—Data Minimization’s Substantive Turn: Key Questions & Operational Challenges Posed by New State Privacy Legislation. Data minimization is a bedrock principle of privacy and data protection law, with origins in the Fair Information Practice Principles (FIPPs) and the Privacy Act of 1974. At a high […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: crafting a design code […]

With the close of Utah’s short legislative session, the Beehive State is once again an early mover in U.S. tech policy. In March, Governor Cox signed several bills related to the governance of generative Artificial Intelligence systems into law. Among them, SB 332 and SB 226 amend Utah’s 2024 Artificial Intelligence Policy Act (AIPA) while HB 452 establishes new regulations for […]

On March 14, the Future of Privacy Forum (FPF), submitted comments in response to the Request for Information on the Development of an Artificial Intelligence (AI) Action Plan published in the Federal Register on February 6, 2025. FPF is a non-profit organization that serves as a catalyst for privacy leadership and scholarship, advancing principled data […]

On February 19, the Future of Privacy Forum (FPF) submitted comments to the California Privacy Protection Agency (CPPA) concerning draft regulations governing cybersecurity audits, risk assessments, automated decisionmaking technology (ADMT) access and opt-out rights under the California Consumer Privacy Act. We offer consideration and recommendations intended to strengthen the proposed regulations by reducing ambiguity and […]

The New York legislature passed S929, the New York Health Information Privacy Act (NYHIPA), on January 22. This bill has similar scope and scale as Washington State’s landmark My Health My Data Act (MHMD), with some key differences. The Future of Privacy Forum (FPF) submitted a letter to Governor Hochul’s office, highlighting certain ambiguities in […]

Hundreds of state AI bills have been introduced, but which are the ones to follow? How do the leading bills differ and what are the key areas of debate? How are state legislators thinking about U.S. AI leadership and how do they want to advance both benefits and safeguards? What role does FPF’s Multistate AI […]

On January 18, 2025, the Federal Trade Commission (FTC) finalized its review of the COPPA Rule. Following the FTC’s notice of proposed rulemaking issued in January 2024, this announcement is the latest in a multi-year review of the COPPA Rule, which was last updated in 2013 and which the FTC began reviewing potential updates to […]