Search results

[…] White Paper, May 2025, Jordan Francis, Policy Counsel, U.S. Legislation. ● Jordan Francis, Unpacking the Shift Toward Substantive Data Minimization Rules in Proposed Legislation, IAPP (May 22, 2024), https://iapp.org/news/a/unpacking-the-shift-towards-substantive-data-minimization–rules-in-pro posed-legislation . ● California Privacy Protection Agency, Enforcement Division, Enforcement Advisory No. 2024-1, “Applying Data Minimization to Consumer Requests” https://cppa.ca.gov/pdf/enfadvisory202401.pdf Navigating the Evolving Ad Tech […]

[…] Americans’ Bulk Sensitive Personal Data and United States’ Government-Related Data by Countries of Concern) (executive summary only) ( link ). ● Executive Order 14117 of February 28, 2024, “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” ( link ). ● Data Brokerage and the Third […]

[…] narrowed scope and obligations, as well as broadened transparency requirements. 2. Trends Regarding High-Risk AI / ADMT: Taking a broader look at how developments in states like Virginia, California, and Texas have shaped the landscape for high-risk AI and automated decision-making technologies (ADMTs), including a comparison of legislative approaches and how state strategies have […]

[…] any particular issue areas (e.g., biometrics, location data, youth data) for which it would be helpful to develop best practices? 0–3 PRE-READ DOCUMENTS (optional) ● State Privacy Enforcement Tracker ● U.S. Privacy Enforcement Report ( 2024) ● Processing of Personal Data for AI Training in Brazil: Takeaways from ANPD’s Preliminary Decisions in the Meta Case

[…] decisions and governing data to account for cross-border requirements. 1. Regulatory trends: Which jurisdictions’ data localization or sovereignty requirements are resulting in significant cybersecurity challenges for companies today (China, India, US Data Security Program?) Can evolving certification schemes (Global CBPR, EU Cloud) realistically improve how companies are managing data governance programs? 2. Operational and […]

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

[…] you encountered when attempting to balance calls for innovation within and outside of your organizations with respect to AI with data protection/privacy principles? What’s different in your 2024 implementation vs. your 2025 implementation? 3. What challenges have you encountered over the past year related to having a new broader governance and digital responsibility agenda? […]

[…] and Research Unit (“CGTP”) released the preliminary study Inteligência Artificial Generativa (“Preliminary Study on GenAI”, in Portuguese) as part of its Technological Radar series, on November 29, 2024.1 A short English version of the study was also released by the agency in December 2024. This analysis provides information for developers, processing agents, and data […]

4 I S SU E BRIE F GLO BA L C ro ss-B ord er Data Flo w s in Afr ic a : E xa m in in g Polic y Appro ach e s an d P ath w ays to Reg ula to ry In te ro pera b il it y […]

[…] to them upon request. The CFPB undertook a lengthy and extended process to issue these rules, and engaged with numerous stakeholders and closely monitored market developments to promote consumer interests, innovation, and competition. Ms. Strickland’s testimony lists a number of valuable aspects to the rule, including its treatment of consumer controls, screen scraping, security […]