Search results

[…] apply to generative AI, like data protection and privacy regulations.  Analyses of current frameworks for the development and deployment of generative AI systems and LLMs with common use cases. The report concludes by highlighting key points for policymakers, developers, and deployers:  There is a need to counter the risk of regulatory fragmentation across the […]

[…] reasonable oversight to monitor compliance with any contractual commitments” to which that data are subject. Consistent with the Colorado Privacy Act, the MNCDPA extends this obligation to use of such data rather than just disclosure. Additionally, the MNCDPA includes two novel protections for deidentified and pseudonymous data, providing that: (1) processors and third parties […]

‘Don’t call me kid, don’t call me baby’ – unless you are a child residing in either Colorado or Virginia, where children will soon have increased privacy protections due to recent advances in youth privacy legislation. Virginia and Colorado both have broad-based privacy laws already in effect. During the 2024 state legislative sessions, both […]

[…] work of existing best practices and prior legislative efforts, the CAIA is the first comprehensive United States law to explicitly establish guardrails against discriminatory outcomes from the use of AI. The Act will take effect on February 1, 2026. The CAIA is informed by extensive stakeholder engagement efforts led by Colorado Senate Majority Leader […]

[…] likely to require parental consent.  State privacy laws have varying degrees of requirements for the age assurance of individuals. Three out of four state youth privacy laws use a constructive knowledge standard.  State social media laws are more likely to have no knowledge standard for user age than other enacted privacy laws with youth […]

[…] regarding responsible procurement of artificial intelligence (AI) in government, particularly regarding the intersection of AI tools and systems procurement with other risks posed by the development and use of AI tools and other emerging technologies. The OMB issued the RFI pursuant to the White House’s Executive Order 14110 on Safe, Secure, and Trustworthy Development […]

[…] “actively and knowingly” is not defined, a strict reading would suggest that the bill forbids businesses from retaining any information about a child user beyond a single- use session, including basic details like account information and log-in credentials. This restriction would functionally deprive children of the ability to use many online products, services, and […]

[…] compromising student privacy,” said John Verdi, FPF’s Senior Vice President for Policy. “Since its founding, FPF’s work has been driven by a belief that fair and ethical use of technology can improve people’s lives while safeguarding our privacy. SafeInsights’ model and directive will be critical to advancing the next generation of education research.” SafeInsights […]

[…] reasonable design practices is challenging. In the context of data protection, regulations related to manipulative and deceptive design often focus on consent flows for data collection and use. Because manipulative and deceptive design practices may facilitate consent that is not truly “informed” or “freely-given,” regulators have indicated that these practices threaten the notice and […]