Search results

[…] Article 1 of the LGPD identifies the objective of the law as ensuring the processing of personal data protects the fundamental rights of freedom, privacy, and the free development of personality3. At the same time, Article 2 of the LGPD recognizes data protection is “grounded” on economic and technological development and innovation.  The study […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: […]

On May 8, Montana Governor Gianforte signed SB 297, amending the Montana Consumer Data Privacy Act (MCDPA). This amendment was sponsored by Senator Zolnikov, who also championed the underlying law’s enactment in 2023. Much has changed in the state privacy law landscape since the MCDPA was first enacted, and SB 297 incorporates elements of further […]

[…] high utility loss for QIs) Masking Obscure parts of data values (e.g., XXXX) Obscure direct identifiers Simple; Preserves format Limited privacy protection; Can reduce utility; Hard for free text Low (Insufficient for QIs in queries) Generalization Replace specific values with broader categories Reduce identifiability via QIs Basis for k-anonymity Significant utility loss, especially in […]

[…] The passage of Arkansas COPPA 2.0 may signal an emerging trend towards a potentially more constitutionally resilient approach to protecting children and teens online. Unlike age-appropriate design codes or social media age verification mandates, which have faced significant First Amendment challenges, Arkansas COPPA 2.0 takes a more targeted approach focused on privacy and data […]

[…] while scraping has long existed in a legal gray area, the rise of AI has heightened privacy concerns. He challenged the perception that publicly available data is free for unrestricted use, noting that privacy laws are evolving to address these issues. The discussion explored potential regulatory solutions, emphasizing the importance of distinguishing between beneficial […]

[…] maintains consent as the general basis for the processing of personal data – similar to how it was regulated by the former LPVP. Consent must be “ free, informed and specific as to its purpose” and given “in advance and unequivocally” by means of a verbal or written statement, or expressed through electronic means […]

[…] and the United States. Dealing with these risks requires that greater attention be paid to geopolitical crises and legal fragmentation as a threat to protections for the free flow of data across borders.  The end of the ‘Brussels effect’? There has been much talk of the ‘Brussels effect’ that has allowed the EU to […]

Thank you for the contributions of Rob van Eijk, Marlene Smith, and Katy Wills We are now in 2025, the year of AI agents. In the last few weeks, leading large language model (LLM) developers (including OpenAI, Google, Anthropic) have released early versions of technologies described as “AI agents.” Unlike earlier automated systems and even […]