Search results

[…] should CISOs, CPOs and GCs coordinate on global data strategy with business ? What’s the board-level view of these risks and how are they being prioritized? What frameworks are used to evaluate data risk footprint? How can AI governance and data localization rules be reconciled in global cloud deployments ? Who owns cross-border data strategy?

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

[…] development and innovation.  The study recognizes that advances in machine learning enable generative AI systems beneficial to key fields, including healthcare, banking, and commerce and highlights three use cases likely to produce valuable benefits for Brazilian society. For instance, the Federal Court of Accounts is implementing “ChatTCU”, a generative model to assist the Court’s […]

[…] nt, diff ere nce s in th e so cia l, polit ic a l, a n d eco no m ic co nte xts have been use d to exp la in th e va rie d ap pro ach e s to cro ss-b ord er data flo w s p ro […]

[…] personal data to other African countries To operationalize inter-African cross-border data flows, legal frameworks on the continent increasingly reference data transfer tools. The Issue Brief explores the use and implementation of mechanisms such as adequacy decisions, certification mechanisms, standard contractual clauses (SCCs), and binding corporate rules (BCRs) and derogations, currently in use across Kenya, […]

[…] testimony notes that the CFPB is authorized to issue rules under Section 1033 of the Dodd-Frank Act that require covered entities to make information about consumers who use their financial products available to them upon request. The CFPB undertook a lengthy and extended process to issue these rules, and engaged with numerous stakeholders and […]

[…] substantive obligations relating to privacy, in addition to security and anti – breach requirements. Privacy and security are related yet distinct disciplines. Privacy relates to how companies use co nsumer information entrusted to them, and respect consumers’ rights and control over that information. It’s important that a company 4 secures information from hackers. That’s […]

[…] as a contested and priority issue in privacy legislation. Under many existing state privacy laws, companies have been subject to “procedural” data minimization requirements whereby collection and use of personal data is permitted so long as it is adequately disclosed or consent is obtained. As privacy advocates have pushed to shift away from notice-and-choice, […]

[…] d ura l” data min im iz a tio n r e q uir e m ents whe re b y co lle ctio n an d use of pers o nal data is perm it te d so lo ng as it is ad eq uate ly d is c lo se d […]

[…] against Maryland’s law earlier this year) Nebraska and Vermont demonstrate how policymakers are experimenting with divergent frameworks in hopes of creating constitutionally sound models for youth online privacy and safety. See our comparison chart for a full side-by-side comparison between the Nebraska Age-Appropriate Design Code Act (LB 504) and Vermont Age-Appropriate Design Code Act (S.69).