Search results

[…] protections for consumer health data. New Y ork passed, but has not yet enacted, a broad bill similar to Washington State’ s My Health My Data Act. Virginia updated its Consumer Protection Act to prohibit obtaining, disclosing, selling, or disseminating any personally identifiable reproductive or sexual health information without a consumer’ s consent. How […]

[…] personal data, and consequently, processors and AI developers must ensure compliance with personal data principles and obligations. Scraping operations that capture personal data must be based on one of the LGPD’s lawful bases for processing (Articles 7 and 11) and comply with data protection principles of good faith, purpose limitation, adequacy, and necessity (Article […]

[…] eig ht an ne xe s to th e Pro to co l on Dig it a l Tra d e, i n clu d in g one on cro ss-b ord er data flo w s, 4 mark in g th e firs t co ntin e nta l in it ia tiv […]

[…] a principles -based approach to privacy. Key examples of modern privacy principles relate to notice, consent or control, individual rights, data minimization, ethical data uses, and security. One of the most significant of these principles, sometimes called data portability, relates to individuals’ rights to be able to access and transport information about themselves . […]

[…] . Lik e th e co lle ctio n ve rs u s pro ce ssin g dis tin ctio n, sta tu te s may have one data min im iz a tio n ru le ap plic a b le to pers o nal data gene ra lly an d an o […]

[…] against Maryland’s law earlier this year) Nebraska and Vermont demonstrate how policymakers are experimenting with divergent frameworks in hopes of creating constitutionally sound models for youth online privacy and safety. See our comparison chart for a full side-by-side comparison between the Nebraska Age-Appropriate Design Code Act (LB 504) and Vermont Age-Appropriate Design Code Act (S.69).

[…] Vermont takes a more granular approach. It explicitly prohibits providing users with a single “less protective” setting that would override others, explicitly limiting the use of all-in- one privacy toggles. Furthermore, a number of its default setting requirements only apply to social media platforms, a divergence from prior AADCs whose requirements have generally been […]

[…] s to deve lo p tw o d iff ere nt sig nals to min o rs while V erm ont may only re q uir e one . P ro h ib it io n s D ata m in im iz a tio n C ove re d se rv ic e […]

[…] principled data practices supporting emerging technologies. ABOUT FUTURE OF PRIVACY FORUM We Believe We Believe Privacy is a Fundamental Human Right 1 We Believe Data Protection is One Effective Means to Balance Rights and Freedoms in Society 2 We Believe That Law, Policy, and Technology Can Mitigate Harms of Data Use and Misuse 3 […]

[…] protection agencies of different countries. “It’s important to see how the authority of the data protection authority remains relevant and at the center of regulation around AI. One interesting point in the AI Act is that in the Netherlands, there were around 20 authorities appointed as having competence to enforce and regulate to a […]