Search results

[…] governing data to account for cross-border requirements. 1. Regulatory trends: Which jurisdictions’ data localization or sovereignty requirements are resulting in significant cybersecurity challenges for companies today (China, India, US Data Security Program?) Can evolving certification schemes (Global CBPR, EU Cloud) realistically improve how companies are managing data governance programs? 2. Operational and contractual implications: […]

[…] laws with duties of care to avoid heightened risk of harm. That’ s a model adopted in Connecticut, Colorado, and now Montana. There’ s the Age-Appropriate Design Code model under consideration in several states and enacted in California and Maryland. There is also significant ongoing litigation over age verification requirements, resulting in injunctions across […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: crafting a design […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common […]

[…] Portal Community) ● FPF Global Privacy News tracks data protection laws and proposals around the world. This community provides members with a monthly Africa, APAC, China, EU, India, and LATAM newsletter and invites to timely snap calls. Gabriela Zanfir-Fortuna, Vice President for Global Privacy, [email protected] ● Informs policymakers on complex technical and legal subjects […]

[…] & Location Open Banking Research & Ethics U.S. Federal & State Legislation Youth & Education FPF’S WORKSTREAMS & REGIONS Regions U.S. Europe Asia-Pacific Latin America Africa Israel India 3 ANNUAL REPORT 2023 4 FROM LEADERSHIP Christopher Wolf BOARD CHAIR 2008–2024 Jules Polonetsky CHIEF EXECUTIVE OFFICER Dear Supporters, Members, and Friends, 2023 marked the fifteenth […]

[…] addressing risk in AI systems (Australia), promoting industry development (South Korea), fostering international cooperation, and responsible AI practices (Japan), government oversight of deployment of AI systems ( India) and regulating misinformation and personal information protection (China). “The APAC region is like a huge experimental lens for AI regulation, with different jurisdictions trying out different […]

On May 7, 2025, the Future of Privacy Forum (FPF) hosted a “Deploying AI Systems” workshop at the Privacy + Security Academy’s Spring Academy, which took place at The George Washington University in Washington, DC. Workshop participants included students and privacy lawyers from firms, companies, data protection authorities, and regulatory agencies around the world. The […]

[…] of the state comprehensive privacy laws when the law was enacted in 2023. At that time, prior comprehensive privacy laws in Virginia, Colorado, Utah, Connecticut, Iowa, and Indiana all applied to controllers that either (1) control or process the personal data of at least 100,000 consumers (“the general threshold”), or (2) control or process […]

[…] its familiarity, despite known limitations. This Issue Brief provides an updated view of evolving consent requirements and alternative legal bases for data processing across key APAC jurisdictions: India, Vietnam, Indonesia, the Philippines, South Korea, and Malaysia. In August 2023, India passed the Digital Personal Data Protection Act (DPDPA). Once in force, the DPDPA will […]