Search results

[…] and consent withdrawal in research ethics. Thinking about a public interest research trial, if a person engages in a research trial and then later withdraws, must you withdraw all the data and insights collected up to that point? There is an argument for “no” – that past data is kept and only future data […]

[…] thought leadership and regionally grounded research. We were delighted to be an official partner of the Network of African Data Protection Authorities (NADPA) Conference hosted in Abuja, Nigeria, with an event on securing safe and trustworthy cross-border data flows. Over the next years, FPF Africa will sustain its support for data practices that drive […]

[…] use and implementation of mechanisms such as adequacy decisions, certification mechanisms, standard contractual clauses (SCCs), and binding corporate rules (BCRs) and derogations, currently in use across Kenya, Nigeria, South Africa, Rwanda, and Ivory Coast. This comparative analysis highlights that the practical implementation of transfer tools remains uneven across the continent, and many countries lack […]

[…] of FPF’s Youth & Education Privacy program. 7 ANNUAL REPORT 2023 8 Global data protection and privacy regulations continued to develop in 2023 at a rapid pace. Nigeria and India passed comprehensive data protection laws — with India’s Digital Personal Data Protection Act (DPDPA) passage meaning 19 of the G20 countries now have a […]

[…] required to take “all reasonable electronic measures” to notify consumers of material changes to privacy notices or practices and to provide a “reasonable opportunity for consumers to withdraw consent to any further materially different collection, processing, or transfer of previously collected personal data.”  The law provides that controllers do not need to provide a […]

[…] provide a comprehensive framework for processing personal data. It affirms consent as the primary basis for processing but introduces structured obligations around notice, purpose limitation, and consent withdrawal, while enabling future flexibility for alternative legal bases. Vietnam‘s Decree on Personal Data Protection took effect in July 2023. It sets clearer standards for consent while […]

[…] determine that a previously-certified AI system no longer meets the requirements set forth in Section 2 of the AIA. In such cases, the body may ‘suspend or withdraw the certificate issued or impose restrictions on it,’ unless compliance is ‘ensured by appropriate corrective action taken by the provider … within an appropriate deadline set […]

[…] rights. Assurance of controllability and trustworthiness (确保可控可信) AI actors should ensure that humans are granted the rights to make fully autonomous decisions; accept or reject AI-provided services; withdraw from AI interactions at any time; and terminate AI system operations at any time. AI actors should also ensure that AI is always under human control. […]