From Proposal to Passage: Enacted U.S. AI Laws, 2023–2025
Over the past three years, lawmakers across the United States have increasingly enacted AI-related laws that shape the development and deployment of AI systems. Between 2023 and 2025, the Future of Privacy Forum tracked 27 pieces of enacted AI-related legislation across 14 states, along with one federal law (the TAKE IT DOWN Act) that carry […]
Red Lines under the EU AI Act: Understanding ‘Prohibited AI Practices’ and their Interplay with the GDPR, DSA
Blog 1 | Red Lines under the EU AI Act Series This blog is the first of a series that explores prohibited AI practices under the EU AI Act and their interplay with existing EU law. You can find the whole series here. The EU AI Act prohibits certain AI practices in the European Union (hereinafter also […]
Paradigm Shift in the Palmetto State: A New Approach to Online Protection-by-Design
South Carolina Governor McMaster signed HB 3431, an Age-Appropriate Design Code (AADC) -style law, on February 5, adding to the growing list of new, bipartisan state frameworks fortifying online protections for minors. Although HB 3431 is dubbed an AADC, its divergence from past models and unique blend of requirements that draw upon a variety of […]
[FPF Legislation] South Carolina Comparison Chart
S ou th Caro lin a AAD C-S ty le Act Com paris o n Chart P re p a re d by: Danie l Hale s, Polic y Counse l, US Le g is la tio n O ve rv ie w : On Fe b ru ary 5, 20 26 , South Caro […]
FPF Retrospective: U.S. Privacy Enforcement in 2025
The U.S. privacy law landscape continues to mature as new laws go into effect, cure periods expire, and regulators interpret the law through enforcement actions and guidance. State attorneys general and the Federal Trade Commission act as the country’s de facto privacy regulators, regularly bringing enforcement actions under legal authorities both old and new. For […]
Privacy Enforcement Retrospective_2026.02.06
RETR O SP EC TIV E U S PO LIC Y U .S . Priv a cy Enfo rc e m en t in 2 0 25 U .S . Le g is la tio n & Reg ula tio n F eb ru ary 20 26 A uth o re d By: Jo rd […]
FPF U.S. Privacy Enforcement in 2025
RETR O SP EC TIV E U S PO LIC Y U .S . Priv a cy Enfo rc e m en t in 2 0 25 U .S . Le g is la tio n & Reg ula tio n F eb ru ary 20 26 A uth o re d By: Jo rd […]
Operations Internships
The Future of Privacy Forum (“FPF”) is a non-profit organization that serves as a catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies. FPF brings together industry, academics, consumer advocates, and other thought leaders to explore the challenges posed by technological innovation and develop privacy protections, ethical norms and […]
6 Privacy Tips for the Generative AI Era
Data Privacy Day, or Data Protection Day in Europe, is recognized annually on January 28 to mark the anniversary of Convention 108, the first binding international treaty to protect personal data. The Council of Europe initiated the day in 2006, with the first official celebration held on January 28, 2007, marking this year as the […]
FPF-Age-Assurance-v2.0
The age credential is cryptographically bound to Miles’ device passkey. This ensures that if Miles shares his phone with James, a 15-year-old friend, James cannot access 16+ features. The age signal is only released when a PIN, pattern, or local biometric is successfully entered. ID USER ACTIVITY 01 / 02 / 2009 BIRTHDATE In this […]