Search results

[…] edtech companies and schools are required to comply with the NIST Cybersecurity Framework. (8 NYCRR part 121). ] Website or Online Tool Brief Summary of Educational Purpose/Use Link to Privacy Policy or Terms and Conditions Please take a moment to review the websites and online tools we plan to use, as well as what […]

[…] data. Therefore, it should be a priority for school 16 FUTURE OF PRIVACY FORUM • Student Privacy Communications Toolkit: For Schools and Districts ›A copy of or link to the school or district’s policy regarding directory information ›A copy of or link to the school or district’s policy under the Protection of Pupil Rights […]

[…] definitions such as  “consumer” (an individual acting in their individual or household capacity and not in a commercial or employment context), “personal data” (any information that is linked or reasonably linkable to an identified or identifiable natural person, excluding deidentified data or publicly available information); and “sensitive data” (includes sensitive characteristics [such as race […]

[…] (non-employment) capacity; controller is defined as an entity that determines the purposes and means of processing personal data; personal data is defined as any information that is linked or reasonably linkable to an identified or identifiable individual and does not include deidentified data or publicly available information; and there is nothing novel in the […]

[…] Trends As of March 2026, state and federal lawmakers have introduced over 70 bills in 2026 addressing a range of data-driven pricing practices. 50 Many proposed bills mirror New York’s Algorithmic Pricing Disclosure Act, mandating specific disclosures for personalized and/or algorithmic pricing, while others seek to generally ban “surveillance pricing” practices, particularly in essential […]

[…] data gathered under a use of the “emergency” authorization exception.  Whether a decision with adverse legal effect is produced solely based on an RBI system’s output, is linked to the human oversight requirements set out in Article 14 of the AI Act. The Commission emphasizes that even with prior authorization, an RBI system may […]

[…] is ancillary to another commercial service and strictly necessary for objective technical reasons. According to Recital 16 AI Act, an ancillary feature is one that is intrinsically linked to another commercial service and cannot be used independently of that service. The Guidelines provide several examples to illustrate this distinction. For instance, filters that categorize […]

[…] a requirement for the exception to apply. The Guidelines also highlight that data collected and processed in this context cannot be used for any other purpose, hence linking to the GDPR’s purpose limitation principle. 6. Interplay with the GDPR The Guidelines mention, in a footnote, that there is a distinction between the definition of […]

[…] researchers, civil society representatives, and industry experts. The Symposium offers a dynamic forum to examine and debate some of the most pressing issues shaping Europe’s digital society today and in the years ahead. Our full program and speaker announcements are coming soon. Stay tuned! While we prepare for the 2026 edition, you can explore […]

[…] for specific chatbot behaviors (TN SB 1493). Litigation is Shaping The Legislative Agenda One notable feature of the 2026 chatbot landscape is how closely these proposed provisions mirror themes emerging from recent chatbot litigation and enforcement, such as Commonwealth of Kentucky v. Character Technologies Inc. and Garcia v. Character Technologies Inc. et al. Across […]