Search results

[…] laws are either being adopted (South Korea), quickly advancing (Brazil), or being prepared (Japan and China). At the same time, some have suggested that fast-moving AI tech, business practices, and individuals’ engagement with AI tools should prompt policymakers to revisit and hone aspects of the AI Act. What factors and considerations drive the substance […]

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

Brazil’s Autoridade Nacional de Proteção de Dados (“ANPD”) Technology and Research Unit (“CGTP”) released the preliminary study Inteligência Artificial Generativa (“Preliminary Study on GenAI”, in Portuguese) as part of its Technological Radar series, on November 29, 2024. A short English version of the study was also released by the agency in December 2024. This analysis […]

Cross-border data flows are critical to Africa’s digital economy, enabling trade, innovation, and access to continental and global markets. As the drive towards data-driven technologies among businesses and governments grows, the ability to transfer personal data across borders efficiently and securely has become a key policy concern on the continent, a position echoed by […]

Today, FPF Senior Fellow Zoe Strickland testified before the U.S. House of Representatives Financial Services Subcommittee on Financial Institutions, providing expert insight about data privacy in the financial system, focusing specifically on rulemaking under Section 1033 of the Dodd-Frank Act.  With over 25 years of experience as a global chief privacy officer at Fortune […]

[…] testifying at this fact -finding hearing is to support congressional efforts to advance financial privacy , and to support innovative services that can support competition and new business opportunities that provide consumer value. To this end, I thought it would be helpful to spend a few minutes on my and FPF’s privacy expertise. Over […]

[…] substantive turn promises to better align companies’ collection and use of personal data with consumers’ reasonable expectations. For its detractors, however, this trend threatens to upend longstanding business practices, introduce legal uncertainty, and threaten socially beneficial uses of data. The core of this debate is really the societal value of different uses of data, […]

Today, the Future of Privacy Forum ( FPF) published a new paper—Data Minimization’s Substantive Turn: Key Questions & Operational Challenges Posed by New State Privacy Legislation. Data minimization is a bedrock principle of privacy and data protection law, with origins in the Fair Information Practice Principles (FIPPs) and the Privacy Act of 1974. At […]

[…] cto rs , ho w eve r, th is tr e nd th re ate ns to up end l o ng sta n d in g busin e ss pra ctic e s, in tr o d uce le g al unce rta in ty , an d th re ate n so […]

In May 2025, Nebraska and Vermont passed Age-Appropriate Design Code Acts (AADCs), continuing the bipartisan trend of states advancing protections for youth online. While these new bills arrived within the same week and share both a common name and general purpose, their scope, applicability, and substance take two very different approaches to a common goal: crafting a design code […]