Search results

[…] old, many advocates, stakeholders, and Congressional lawmakers are pushing to amend COPPA to ensure its data protections are reflective and befitting of the online environments youth experience today.  The new House version of COPPA 2.0, introduced by Reps. Tim Walberg (R-MI) and Laurel Lee (R-FL), would amend the law by adding new definitions, revising […]

[…] use, and disclosure practices of the operator with respect to personal information ; and ( B) before the personal information of the child or teen is collected, freely and unambiguously authorizes — (i) the collection, use, and disclosure, as applicable, of that the personal information ; and 6 (ii) the any subsequent use of […]

[…] our congressional testimony, FPF considers that the typical regulatory course is to be silent about fees between business parties, which can be addressed via contract and the free market. However, FPF recognizes the unique challenges raised in the open banking context since the data provider holds the information needed by the consumer and third […]

[…] the means to reasonably identify the individuals: if they do not process personal data, the GDPR does not apply.  On the other hand, pseudonymization is not a free pass. A dataset may still qualify as personal data: (1) if the recipient has reasonable means to re-identify the individual; (2) for the controller who holds […]

[…] heightened risk of harm to a consumer. C.R.S. § 6-1-1309(1). Where a type of processing is likely to result in a high risk to the rights and freedoms of natural persons. Art. 35(1). DPAs are required where processing activities pose some heightened risk of harm. A key difference between these regulations is whether that […]

[…] of the most significant yet. Starting January 1, 2026, businesses will be subject to extensive new obligations concerning automated decisionmaking technology (ADMT), risk assessments, and cybersecurity audits. Today, the Future of Privacy Forum released an issue brief covering these extensive new regulations, providing stakeholders a comprehensive overview of these new legal requirements and context […]

[…] of the most significant yet. Starting January 1, 2026, businesses will be subject to extensive new obligations concerning automated decisionmaking technology (ADMT), risk assessments, and cybersecurity audits. Today, the Future of Privacy Forum released an issue brief covering these extensive new regulations, providing stakeholders a comprehensive overview of these new legal requirements and context […]

[…] Senior Director of U.S. Legislation, Future of Privacy Forum AUTHORS Thanks to Bridget Egan for her research contributions. ACKNOWLEDGEMENTS All FPF materials that are released publicly are free to share and adapt with appropriate attribution. Learn more . 3 Table 1. Legislative Outcomes for State AI Bills Overview of the 210 industry-focused AI bills […]

[…] Senior Director of U.S. Legislation, Future of Privacy Forum AUTHORS Thanks to Bridget Egan for her research contributions. ACKNOWLEDGEMENTS All FPF materials that are released publicly are free to share and adapt with appropriate attribution. Learn more . The Future of Privacy Forum’s (FPF) report, The State of State AI: Legislative Approaches to AI […]

Washington, D.C. – September 12, 2025  — The Future of Privacy Forum, a global non-profit focused on data protection, AI and emerging technologies today announced that it has honored Julie Brill with its Lifetime Achievement Award. The award recognizes Brill’s decades of leadership and profound impact on the fields of consumer protection, data protection […]