Search results

[…] us as we discuss the current environment and help us map unanswered questions and areas of concern. 5–8 KEY DISCUSSION QUESTIONS Regulators world-wide are erecting barriers to free data flows based on data privacy, national security/law enforcement and economic sovereignty. These rules impact how companies structure cloud infrastructure and vendor contracts, conduct cybersecurity monitoring […]

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

[…] In some instances, users may not be aware of the risks involved in sharing personal information or, if aware, they might choose to “trust the system” to get the answers and assistance they need. In this scenario, the CGTP points out that safeguards should be developed to create privacy-friendly systems. One way to achieve […]

[…] or create a more broad -based privacy law. I appreciate these initiatives, and recognize the challenges. Privacy is a wide -ranging field that can be difficult to get your figurative and legislative arms around. There can also be inertia with existing regulatory environments and real questions about how existing compliance frameworks would interact with […]

[…] rth e r in tim e. F u rth e rm ore , re q uir in g th at co ve re d entit ie s get opt- in co nse nt— und er th e mean in g fu l “fr e ely g iv e n, sp ecifi c, in fo […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: crafting a design […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common […]

[…] be easy to use and understand. Stakeholders should clarify what data will be collected, to whom it will be shared, how it will be used, and should get consent for any secondary uses. 3. AUTHORIZE DATA SHARINGThe customer authorizes the data provider to send data to the recipient. The customer sees options to share […]

[…] lowest numerical applicability thresholds of any of the state comprehensive privacy laws when the law was enacted in 2023. At that time, prior comprehensive privacy laws in Virginia, Colorado, Utah, Connecticut, Iowa, and Indiana all applied to controllers that either (1) control or process the personal data of at least 100,000 consumers (“the general […]

[…] contract performance, bringing Indonesia closer to global privacy frameworks. In November 2023, the Philippines‘ National Privacy Commission issued a Circular on Consent, clarifying valid consent standards and promoting transparency. The guidance aims to reduce consent fatigue by encouraging layered, contextual consent interfaces and outlines when consent may not be strictly necessary. South Korea amended […]