Search results

[…] of the GDPR, which makes the EU Commission responsible for determining whether a jurisdiction or international organization provides an adequate level of protection and issuing a so- called “adequacy decision.” Malaysia’s new cross-border data transfer provision is more adaptable but in the absence of strong enforcement by the PDPD may potentially be open to […]

[…] and cooperate with government policies. Business Operators (defined in the Act as individuals or organizations planning to develop, offer, or incorporate artificial intelligence technologies into their products, services, or business operations) are encouraged to actively utilize AI to improve efficiency and innovate, and to cooperate with government policies. Citizens are expected to deepen their […]

[…] states explore more “substantive” requirements that tie the collection, processing, and/or sharing of personal (or sensitive) data to what is “necessary” to provide a requested product or service. At various points this year, Connecticut, Colorado, and Oregon all considered amending their existing privacy laws to include Maryland-style substantive data minimization requirements. None of these […]

[…] the Council on Foreign Relations, Maryam Mujica, Chief Public Policy Officer at General Catalyst, and Pablo Chavez, Adjunct Senior Fellow, Technology and National Security Program at the Center for a New American Security (CNAS). Focusing specifically on how the United States’ role in global data flows and AI has shifted under the new administration, […]

New internship program established in honor of former FPF staff Washington, D.C. – June 12, 2025  — The Future of Privacy Forum (FPF), a global non-profit focused on data protection, AI and emerging technologies, announced the recipients of the 2025 FPF Achievement Awards, honoring exceptional contributors to AI and privacy leadership in the public […]

[…] data minimization paradigm embodied in MODPA, MHMD, and the NYCPA, the collection of data itself is prohibited unless it is deemed necessary for providing a product or service requested by the consumer. In this regard it is closely related to purpose specification. In a substantive model, collection and use is tied to the nature […]

[…] Country ● Health: A View from DC: New York Readies to Pass an Extraordinary Health Privacy Law ● Location: FPF Mobility & Location March 2025 Working Group Call Notes ● FPF Report: Anatomy of State Comprehensive Privacy Law State & Federal Privacy Legislation and Regulation Discussion Lead: Jordan Francis and Keir Lamont CONTINUED: 6. […]

[…] hospital protocols and support decision-making in the healthcare sector. Finally, Banco do Brasil is developing a Large Language Model (LLM) to assist employees in providing better customer service experiences. The study also highlights the increasing popularity of commercially available generative AI systems such as OpenAI’s ChatGPT and Google’s Gemini among Brazilian users.  In this […]

[…] Act), and children (Children’s Online Privacy Protection Act). Other privacy protection laws relate to topics like marketing, such as the CAN -SPAM Act and do -not – call requirements. U.S. laws can give federal agencies power to issue supporting regulations, such as the Federal Trade Commission for CAN -SPAM or the Consumer Financial Protection […]

[…] which personal data can be collected, used, or shared, typically requiring some connection between the personal data and the provision or maintenance of a requested product or service. This white paper explores this ongoing trend towards substantive data minimization, with a focus on the unresolved questions and policy implications of this new language. Read […]