Search results

[…] laws with duties of care to avoid heightened risk of harm. That’ s a model adopted in Connecticut, Colorado, and now Montana. There’ s the Age-Appropriate Design Code model under consideration in several states and enacted in California and Maryland. There is also significant ongoing litigation over age verification requirements, resulting in injunctions across […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: crafting a design […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common […]

[…] Portal Community) ● FPF Global Privacy News tracks data protection laws and proposals around the world. This community provides members with a monthly Africa, APAC, China, EU, India, and LATAM newsletter and invites to timely snap calls. Gabriela Zanfir-Fortuna, Vice President for Global Privacy, [email protected] ● Informs policymakers on complex technical and legal subjects […]

[…] & Location Open Banking Research & Ethics U.S. Federal & State Legislation Youth & Education FPF’S WORKSTREAMS & REGIONS Regions U.S. Europe Asia-Pacific Latin America Africa Israel India 3 ANNUAL REPORT 2023 4 FROM LEADERSHIP Christopher Wolf BOARD CHAIR 2008–2024 Jules Polonetsky CHIEF EXECUTIVE OFFICER Dear Supporters, Members, and Friends, 2023 marked the fifteenth […]

[…] addressing risk in AI systems (Australia), promoting industry development (South Korea), fostering international cooperation, and responsible AI practices (Japan), government oversight of deployment of AI systems ( India) and regulating misinformation and personal information protection (China). “The APAC region is like a huge experimental lens for AI regulation, with different jurisdictions trying out different […]

[…] of the state comprehensive privacy laws when the law was enacted in 2023. At that time, prior comprehensive privacy laws in Virginia, Colorado, Utah, Connecticut, Iowa, and Indiana all applied to controllers that either (1) control or process the personal data of at least 100,000 consumers (“the general threshold”), or (2) control or process […]

[…] its familiarity, despite known limitations. This Issue Brief provides an updated view of evolving consent requirements and alternative legal bases for data processing across key APAC jurisdictions: India, Vietnam, Indonesia, the Philippines, South Korea, and Malaysia. In August 2023, India passed the Digital Personal Data Protection Act (DPDPA). Once in force, the DPDPA will […]

[…] the advancement of science and healthcare improvements which are accomplished with de-identified data. Properly implemented de-identification complying with the HIPAA de-identification provisions goes a long way toward promoting such a reasonable balance, but I would suggest that there is still room for further improvements in this regard. Where Should We Go From Here? Perhaps […]

[…] values are replaced with broader, less precise categories. Examples include replacing an exact birth date with just the birth year or an age range, a specific ZIP code with a larger geographic area, or a specific occupation with a broader job category. This is a core technique used to achieve k-anonymity. While it reduces […]