Search results

Introduction As the U.S. population ages, technologies that can help support older adults are becoming increasingly important. These tools, often called “AgeTech”, exist at the intersection of health data, consumer technology, caregiving relationships, and increasingly, artificial intelligence, and are drawing significant investment. Hundreds of well funded start-ups have launched. Many are of major interest […]

[…] of the GDPR, which makes the EU Commission responsible for determining whether a jurisdiction or international organization provides an adequate level of protection and issuing a so- called “adequacy decision.” Malaysia’s new cross-border data transfer provision is more adaptable but in the absence of strong enforcement by the PDPD may potentially be open to […]

[…] states explore more “substantive” requirements that tie the collection, processing, and/or sharing of personal (or sensitive) data to what is “necessary” to provide a requested product or service. At various points this year, Connecticut, Colorado, and Oregon all considered amending their existing privacy laws to include Maryland-style substantive data minimization requirements. None of these […]

[…] up the crowd for “The Big Debates.” This event’s debate-style format allowed the audience to participate via real-time voting before, during, and after the debaters’ presentations.  Debate 1: “Current U.S. Law Provides Effective Regulation for AI”  Will Rinehart, Senior Fellow at the American Enterprise Institute, argued in favor of the statement, stating that existing […]

[…] data minimization paradigm embodied in MODPA, MHMD, and the NYCPA, the collection of data itself is prohibited unless it is deemed necessary for providing a product or service requested by the consumer. In this regard it is closely related to purpose specification. In a substantive model, collection and use is tied to the nature […]

[…] actions, settlements, and guidance? 2. How, if at all, has your organization’s compliance strategy shifted in response to changes in state-level privacy law enforcement? How might it change in response to the new administration and new leadership at federal agencies? 3. Has your organization’s approach to privacy changed at all in anticipation of changes […]

[…] Country ● Health: A View from DC: New York Readies to Pass an Extraordinary Health Privacy Law ● Location: FPF Mobility & Location March 2025 Working Group Call Notes ● FPF Report: Anatomy of State Comprehensive Privacy Law State & Federal Privacy Legislation and Regulation Discussion Lead: Jordan Francis and Keir Lamont CONTINUED: 6. […]

[…] hospital protocols and support decision-making in the healthcare sector. Finally, Banco do Brasil is developing a Large Language Model (LLM) to assist employees in providing better customer service experiences. The study also highlights the increasing popularity of commercially available generative AI systems such as OpenAI’s ChatGPT and Google’s Gemini among Brazilian users.  In this […]

[…] Act), and children (Children’s Online Privacy Protection Act). Other privacy protection laws relate to topics like marketing, such as the CAN -SPAM Act and do -not – call requirements. U.S. laws can give federal agencies power to issue supporting regulations, such as the Federal Trade Commission for CAN -SPAM or the Consumer Financial Protection […]

[…] which personal data can be collected, used, or shared, typically requiring some connection between the personal data and the provision or maintenance of a requested product or service. This white paper explores this ongoing trend towards substantive data minimization, with a focus on the unresolved questions and policy implications of this new language. Read […]