Search results

[…] will companies work through and implement an analysis of “necessary,” “reasonably necessary,” or “strictly necessary?” 2. Is data collection “necessary” in ad-driven business models where content is free in exchange for advertising? Is there a distinction between the “necessity” of data for ad measurement or attribution and data collected for first-party or cross-context behavioral […]

[…] Americans’ Bulk Sensitive Personal Data and United States’ Government-Related Data by Countries of Concern) (executive summary only) ( link ). ● Executive Order 14117 of February 28, 2024, “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” ( link ). ● Data Brokerage and the Third […]

[…] narrowed scope and obligations, as well as broadened transparency requirements. 2. Trends Regarding High-Risk AI / ADMT: Taking a broader look at how developments in states like Virginia, California, and Texas have shaped the landscape for high-risk AI and automated decision-making technologies (ADMTs), including a comparison of legislative approaches and how state strategies have […]

[…] any particular issue areas (e.g., biometrics, location data, youth data) for which it would be helpful to develop best practices? 0–3 PRE-READ DOCUMENTS (optional) ● State Privacy Enforcement Tracker ● U.S. Privacy Enforcement Report ( 2024) ● Processing of Personal Data for AI Training in Brazil: Takeaways from ANPD’s Preliminary Decisions in the Meta Case

[…] us as we discuss the current environment and help us map unanswered questions and areas of concern. 5–8 KEY DISCUSSION QUESTIONS Regulators world-wide are erecting barriers to free data flows based on data privacy, national security/law enforcement and economic sovereignty. These rules impact how companies structure cloud infrastructure and vendor contracts, conduct cybersecurity monitoring […]

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

[…] you encountered when attempting to balance calls for innovation within and outside of your organizations with respect to AI with data protection/privacy principles? What’s different in your 2024 implementation vs. your 2025 implementation? 3. What challenges have you encountered over the past year related to having a new broader governance and digital responsibility agenda? […]

[…] Article 1 of the LGPD identifies the objective of the law as ensuring the processing of personal data protects the fundamental rights of freedom, privacy, and the free development of personality.3 At the same time, Article 2 of the LGPD recognizes data protection is “grounded” on economic and technological development and innovation.  The study […]

[…] at Fortune 20 companies in many verticals, including government, retail, healthcare, an d finance. At the USPS, I served as the first CPO, and managed Privacy Act, Freedom of Information Act, and records functions, as well as new areas (at the time) relating to internet privacy. At Walmart, I managed global privacy and records, […]