Search results

[…] are arguably more expansive, as they do not provide an exception (as does the GDPR) for breaches unlikely to result in a risk to the rights and freedoms of natural persons. 2.7. The amendments replace the PDPA’s restrictive former whitelisting data transfers approach with a more flexible cross-border data transfer regime Prior to the […]

[…] advancement but also by a worldwide push to establish new regulatory regimes. In a landmark move, on May 28, 2025, Japan’s Parliament approved the “Act on the Promotion of Research and Development and the Utilization of AI-Related Technologies” (人工知能関連技術の研究開発及び活用の推進に関する法律案要綱) (AI Promotion Act, or Act), making Japan the second major economy in the Asia-Pacific (APAC) […]

[…] s. T he AI Fra m ew ork Act ap plie s t o activ it ie s ca rrie d out both w it h in South Ko re a an d a b ro ad , as lo ng as th e y have a n im pact on th e dom […]

[…] will companies work through and implement an analysis of “necessary,” “reasonably necessary,” or “strictly necessary?” 2. Is data collection “necessary” in ad-driven business models where content is free in exchange for advertising? Is there a distinction between the “necessity” of data for ad measurement or attribution and data collected for first-party or cross-context behavioral […]

[…] us as we discuss the current environment and help us map unanswered questions and areas of concern. 5–8 KEY DISCUSSION QUESTIONS Regulators world-wide are erecting barriers to free data flows based on data privacy, national security/law enforcement and economic sovereignty. These rules impact how companies structure cloud infrastructure and vendor contracts, conduct cybersecurity monitoring […]

[…] PRE-READ DOCUMENTS (optional) ● FPF Resources on the EU AI Act ( link) ●FPF APAC Blog Post: South Korea’s New AI Framework Act: A Balancing Act Between Innovation and Regulation ( link) ●FPF APAC Policy Brief: Update on Japan’s Bill on the Promotion of Research and Development and the Utilization of AI-Related Technologies ( link)

[…] Article 1 of the LGPD identifies the objective of the law as ensuring the processing of personal data protects the fundamental rights of freedom, privacy, and the free development of personality.3 At the same time, Article 2 of the LGPD recognizes data protection is “grounded” on economic and technological development and innovation.  The study […]

[…] tha t outlin e s cro ss-b ord er data tr a n sfe r p ro vis io ns acro ss Kenya , Nig eria , South Afr ic a , Rw an d a, an d Iv o ry Coast. I S SU E BRIE F: G LO BA L T a […]

[…] and implementation of mechanisms such as adequacy decisions, certification mechanisms, standard contractual clauses (SCCs), and binding corporate rules (BCRs) and derogations, currently in use across Kenya, Nigeria, South Africa, Rwanda, and Ivory Coast. This comparative analysis highlights that the practical implementation of transfer tools remains uneven across the continent, and many countries lack clear […]

[…] alignment between data protection regulators, with the G7 Data Protection Authorities and Privacy Commissioners’ Summit in Tokyo. This resulted in a communiqué outlining their focus on Data Free Flow with Trust (DFFT), emerging technologies, and enforcement cooperation. FPF’s Global team circled the globe, hosting and speaking at leading events this year, including the Global […]