Search results

[…] also started conducting Human Rights Impact Assessments (HRIA)? 6. What have been the most significant enforcement actions by Data Protection Authorities (DPAs) in the EU regarding the use of AI and automated decision-making, and what lessons can organizations learn from these cases? 7. What changes could be made to the GDPR to promote the […]

[…] narrowed scope and obligations, as well as broadened transparency requirements. 2. Trends Regarding High-Risk AI / ADMT: Taking a broader look at how developments in states like Virginia, California, and Texas have shaped the landscape for high-risk AI and automated decision-making technologies (ADMTs), including a comparison of legislative approaches and how state strategies have […]

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

[…] development and innovation.  The study recognizes that advances in machine learning enable generative AI systems beneficial to key fields, including healthcare, banking, and commerce and highlights three use cases likely to produce valuable benefits for Brazilian society. For instance, the Federal Court of Accounts is implementing “ChatTCU”, a generative model to assist the Court’s […]

[…] nt, diff ere nce s in th e so cia l, polit ic a l, a n d eco no m ic co nte xts have been use d to exp la in th e va rie d ap pro ach e s to cro ss-b ord er data flo w s p ro […]

[…] personal data to other African countries To operationalize inter-African cross-border data flows, legal frameworks on the continent increasingly reference data transfer tools. The Issue Brief explores the use and implementation of mechanisms such as adequacy decisions, certification mechanisms, standard contractual clauses (SCCs), and binding corporate rules (BCRs) and derogations, currently in use across Kenya, […]

[…] testimony notes that the CFPB is authorized to issue rules under Section 1033 of the Dodd-Frank Act that require covered entities to make information about consumers who use their financial products available to them upon request. The CFPB undertook a lengthy and extended process to issue these rules, and engaged with numerous stakeholders and […]

[…] substantive obligations relating to privacy, in addition to security and anti – breach requirements. Privacy and security are related yet distinct disciplines. Privacy relates to how companies use co nsumer information entrusted to them, and respect consumers’ rights and control over that information. It’s important that a company 4 secures information from hackers. That’s […]

[…] as a contested and priority issue in privacy legislation. Under many existing state privacy laws, companies have been subject to “procedural” data minimization requirements whereby collection and use of personal data is permitted so long as it is adequately disclosed or consent is obtained. As privacy advocates have pushed to shift away from notice-and-choice, […]

[…] d ura l” data min im iz a tio n r e q uir e m ents whe re b y co lle ctio n an d use of pers o nal data is perm it te d so lo ng as it is ad eq uate ly d is c lo se d […]