Search results

[…] under federal health privacy law at all. Instead, protections depend on the state where a user lives, or whether the product falls under one of a growing number of state-level privacy laws or consumer health privacy laws. Laws like New York’s S929/NY HIPA, which remains in legislative limbo, reflect growing state interest in regulating […]

[…] generate a human-readable response. Stage 2: Embedding contextual information Complex contextual information can be reflected as patterns in high-dimensional vectors. The greater the complexity, the higher the number of features that are needed. These are reflected as parameters of the high dimension vectors. Contrariwise, low dimension vectors contain fewer features and have lower representational […]

[…] likely to result in a “high risk” to data subjects. The draft guidelines propose a two-tier approach to assess this risk, considering both quantitative factors (like the number of data subjects) and qualitative ones (such as data sensitivity). Notably, if a DPIA reveals a high overall risk, organizations may be required to notify the […]

[…] and cooperate with government policies. Business Operators (defined in the Act as individuals or organizations planning to develop, offer, or incorporate artificial intelligence technologies into their products, services, or business operations) are encouraged to actively utilize AI to improve efficiency and innovate, and to cooperate with government policies. Citizens are expected to deepen their […]

[…] of certain types of personal data. Under the amendments, a controller cannot disclose the following types of data in response to a consumer access request: social security number; government-issued identification number (including driver’s license number); financial account number; health insurance or medical identification number; account password, security question or answer; and biometric data. Instead, […]

[…] which was referred to the Committee on Commerce, Science, and Transportation for consideration. COPPA 2.0 would amend the Children’s Online Privacy Protection Act (COPPA), initially passed in 1998 to provide protections for teens. On June 25, 2025, the Senate Commerce Committee held a mark-up hearing in which the Committee members favorably reported the bill […]

[…] up the crowd for “The Big Debates.” This event’s debate-style format allowed the audience to participate via real-time voting before, during, and after the debaters’ presentations.  Debate 1: “Current U.S. Law Provides Effective Regulation for AI”  Will Rinehart, Senior Fellow at the American Enterprise Institute, argued in favor of the statement, stating that existing […]

[…] BOARD MEETING June 11–13, 2025 • Washington, D.C. Sovereignty, Localization, and Related Challenges to Effective Cybersecurity Discussion Leads: John Verdi and Jocelyn Aqua SESSION DESCRIPTION An increasing number of regulations seek to restrict or limit organizations’ ability to process data in certain countries or outside of specific jurisdictions. These restrictions are creating significant challenges […]

[…] process to issue these rules, and engaged with numerous stakeholders and closely monitored market developments to promote consumer interests, innovation, and competition. Ms. Strickland’s testimony lists a number of valuable aspects to the rule, including its treatment of consumer controls, screen scraping, security obligations, and industry standards. Her testimony also highlights five areas of […]

[…] Given the rule’s breadth and depth, many stakeholders weighed in. In response to the proposed rule, over 11,000 comments were submitted. In ad dition to the sheer number of comments, the depth and content of the feedback is noteworthy as well. Many comments delved deeply into several corners of the rule, and were lengthy […]