Search results

[…] tools and consumer health technologies? 7. How can organizations build trustworthiness while innovating with health data for public good and commercial use? 8. What role should sector-specific codes of conduct or certifications play? 0–3 PRE-READ DOCUMENTS (optional) ● Comparison of Consumer Health Privacy Frameworks: New York, Washington, and Connecticut ● Consumer Health Data Privacy […]

[…] will companies work through and implement an analysis of “necessary,” “reasonably necessary,” or “strictly necessary?” 2. Is data collection “necessary” in ad-driven business models where content is free in exchange for advertising? Is there a distinction between the “necessity” of data for ad measurement or attribution and data collected for first-party or cross-context behavioral […]

[…] us as we discuss the current environment and help us map unanswered questions and areas of concern. 5–8 KEY DISCUSSION QUESTIONS Regulators world-wide are erecting barriers to free data flows based on data privacy, national security/law enforcement and economic sovereignty. These rules impact how companies structure cloud infrastructure and vendor contracts, conduct cybersecurity monitoring […]

[…] laws with duties of care to avoid heightened risk of harm. That’ s a model adopted in Connecticut, Colorado, and now Montana. There’ s the Age-Appropriate Design Code model under consideration in several states and enacted in California and Maryland. There is also significant ongoing litigation over age verification requirements, resulting in injunctions across […]

[…] Article 1 of the LGPD identifies the objective of the law as ensuring the processing of personal data protects the fundamental rights of freedom, privacy, and the free development of personality.3 At the same time, Article 2 of the LGPD recognizes data protection is “grounded” on economic and technological development and innovation.  The study […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: crafting a design […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common […]

[…] alignment between data protection regulators, with the G7 Data Protection Authorities and Privacy Commissioners’ Summit in Tokyo. This resulted in a communiqué outlining their focus on Data Free Flow with Trust (DFFT), emerging technologies, and enforcement cooperation. FPF’s Global team circled the globe, hosting and speaking at leading events this year, including the Global […]

[…] impact on, a minor; (b) financial, physical, or reputational injury; (c) unauthorized disclosure of personal data as a result of a security breach (as described in Mont. Code Ann. § 30-14-1704); or (d) intrusion upon the solitude or seclusion or private affairs or concerns of a minor, whether physical or otherwise, that would be offensive […]

[…] contract performance, bringing Indonesia closer to global privacy frameworks. In November 2023, the Philippines‘ National Privacy Commission issued a Circular on Consent, clarifying valid consent standards and promoting transparency. The guidance aims to reduce consent fatigue by encouraging layered, contextual consent interfaces and outlines when consent may not be strictly necessary. South Korea amended […]