Search results

[…] a nod to First Amendment concerns that have plagued similar requirements in other state laws. Covered businesses must design services to avoid reasonably foreseeable emotional distress, compulsive use, or discrimination. However, the bill clarifies that the mere content that a minor views cannot, by itself, constitute harm. Nebraska, by contrast, does not create a […]

[…] re ce iv e , se ll, or sh are th e pers o nal d ata of 50,0 00+ co nsu m ers , h o use ho ld s, or devic e s; an d ● Deriv e s >5 0 % of it s annua l re ve n ue f […]

[…] other risks. ● Helps draft FPF reports. Stacey Gray, Senior Director for Artificial Intelligence, [email protected] Biometrics – Quarterly calls ● Private sector participants interested in technologies that use biometric data, such as for recognition and verification, detection, characterization, persistent tracking, and other emerging use cases such as digital identity and emotion analysis. ● Discusses […]

[…] Believe Data Protection is One Effective Means to Balance Rights and Freedoms in Society 2 We Believe That Law, Policy, and Technology Can Mitigate Harms of Data Use and Misuse 3 We Believe in the Fair and Ethical Use of Technology to Improve People’s Lives 4 We Believe in the Power of Inclusive Collaboration […]

[…] region, noting that most APAC jurisdictions have preferred not to enact hard AI laws. Instead, these regions focus on regulating elements of AI systems such as the use of personal data (Singapore), addressing risk in AI systems (Australia), promoting industry development (South Korea), fostering international cooperation, and responsible AI practices (Japan), government oversight of […]

[…] it is necessary to independently test the tools using their own data, rather than relying on representations made by third party vendors – especially for “high risk” use cases. This is due to the growing amount of regulatory interest in unfair and deceptive practices pertaining to AI deployment (e.g. misleading statements about the capabilities, […]

[…] lowest numerical applicability thresholds of any of the state comprehensive privacy laws when the law was enacted in 2023. At that time, prior comprehensive privacy laws in Virginia, Colorado, Utah, Connecticut, Iowa, and Indiana all applied to controllers that either (1) control or process the personal data of at least 100,000 consumers (“the general […]

[…] and related guidelines promote easy-to-understand consent practices and recognize additional legal grounds, especially in the context of AI. A 2025 bill is under consideration to expand the use of non-consent bases for AI-related processing. The Personal Data Protection (Amendment) Act 2024, published in October 2024, introduces stronger enforcement tools and administrative penalties in Malaysia. […]

[…] a profound impact on the development of de-identification provisions within the 2003 Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. Weld’s re-identification, purportedly achieved through the use of a voter registration list from Cambridge, MA is frequently cited as an example that computer scientists can re-identify individuals within de-identified data with “astonishing ease”. […]

[…] to specific individuals. The goal is to enable data analysis, research, and sharing while mitigating privacy harms and complying with legal and ethical obligations. Despite its widespread use and appeal, de-identification is far from a perfected solution. Decades of research and numerous real-world incidents have demonstrated that supposedly “de-identified” or “anonymized” data have been […]