![blue,high tech,tone,of,cityscape,connected,line,,technology,concept,,internet](https://fpf.org/wp-content/uploads/2022/03/shutterstock_485514424-scaled.jpg)
What Happened to the Risk-Based Approach to Data Transfers?
The following is a guest post to the FPF blog from Lokke Moerel, Professor of Global ICT Law at Tilburg University and a Dutch Cyber Security Council member. This blog is a summary of a longer academic paper which can be downloaded here. The guest blog reflects the opinion of the author only. Guest blog posts […]
![Colorado State Flag](https://fpf.org/wp-content/uploads/2022/07/shutterstock_131272469-scaled.jpg)
The “Colorado Effect?” Status Check on Colorado’s Privacy Rulemaking
Colorado is set to formally enter a rulemaking process which may establish de facto interpretations for privacy protections across the United States. With the passage of the Colorado Privacy Act (CPA) in 2021, Colorado, along with Virginia, Utah, and Connecticut, became part of an emerging group of states adopting privacy laws that share a similar […]
![post image](https://fpf.org/wp-content/themes/fpf/img/post.png)
FPF Participates in FTC Event on “Commercial Surveillance and Data Security” Proposed Rulemaking
Yesterday, FPF Senior Director for U.S. Policy Stacey Gray participated in a panel discussion hosted by the Federal Trade Commission (“FTC”) regarding its Advance Notice of Proposed Rulemaking (“ANPR”) on “Commercial Surveillance and Data Security” (comments start at 1:39:00). Feedback from the public forum is intended to help inform the Commission’s decision whether to proceed […]
![beautiful,city,skyline,of,downtown,tokyo,,with,the,famous,landmark](https://fpf.org/wp-content/uploads/2022/09/shutterstock_1891839328-scaled.jpg)
New Report on Limits of “Consent” in Japan’s Data Protection Law
Introduction Today, the Future of Privacy Forum (FPF) and Asian Business Law Institute (ABLI), as part of their ongoing joint research project: “From Consent-Centric Data Protection Frameworks to Responsible Data Practices and Privacy Accountability in Asia Pacific,” are publishing the fourteenth and final report in a series of detailed jurisdiction reports on the status of […]
![california,state,capitol,building,,sacramento,,california](https://fpf.org/wp-content/uploads/2022/09/shutterstock_1071074870-scaled.jpg)
Age-Appropriate Design Code Passes California Legislature
Update: On Sep 15, 2022, California Governor Gavin Newsom signed AB 2273, the California Age-Appropriate Design Code Act. The law will apply to businesses that provide online services, products, or features likely to be accessed by children and broadly requires businesses to implement their strongest privacy settings by default for young users up to the age of […]
![a,panoramic,view,on,the,masai,mara,while,sunset](https://fpf.org/wp-content/uploads/2022/08/shutterstock_1493068322-1-1.jpg)
Looking Back to Forge Ahead: Challenges of Developing an “African Conception” of Privacy
In this post for the FPF Blog, Mercy King’ori explores the cultural and societal underpinnings of “privacy” in Africa, looking throughout history, from pre-colonial times, and beyond the modern external influences on the legislative processes resulting in general data protection laws across the continent. The first essential point to start off from is understanding that […]
![california,state,of,united,states,flag,waving,on,the,wind](https://fpf.org/wp-content/uploads/2022/08/shutterstock_1948822210-scaled.jpg)
FPF Addresses ‘Opt-Out Preference Signals’ in Comments on California Draft Privacy Regulations
Yesterday, the Future of Privacy Forum (FPF) filed comments with the California Privacy Protection Agency regarding the Agency’s initial set of draft regulations to implement the California Privacy Rights Act amendments to the California Consumer Privacy Act. FPF’s comments are directed towards ensuring that both individuals and businesses have clarity for the implementation and exercise […]
![macau,,china,city,skyline,with,resort,casinos.](https://fpf.org/wp-content/uploads/2022/08/shutterstock_1898081242-scaled.jpg)
New Report on Limits of “Consent” in Macau’s Data Protection Law
Introduction Today, the Future of Privacy Forum (FPF) and Asian Business Law Institute (ABLI), as part of their ongoing joint research project: “From Consent-Centric Data Protection Frameworks to Responsible Data Practices and Privacy Accountability in Asia Pacific,” are publishing the twelfth in a series of detailed jurisdiction reports on the status of “consent” and alternatives […]
![european,union,flag,waving,in,the,wind.,close,up,of](https://fpf.org/wp-content/uploads/2022/05/shutterstock_1905197968-scaled.jpg)
ETSI’s consumer IoT cybersecurity ‘conformance assessments’: parallels with the AI Act
In early September 2021, the European Telecommunications Standards Institute (ETSI) published its European Standard to lay down baseline cybersecurity requirements for Internet of Things (IoT) consumer products (ETSI EN 303 645 V2.1.1). The Standard is a recommendation to manufacturers to develop IoT devices securely from the outset. It also provides an internationally recognized benchmark – […]
![views,of,slums,on,the,shores,of,mumbai,,india,against](https://fpf.org/wp-content/uploads/2022/08/shutterstock_1845095554-scaled.jpg)
New Report on Limits of “Consent” in India’s Data Protection Law
Today, the Future of Privacy Forum (FPF) and the Asian Business Law Institute (ABLI), as part of their ongoing joint research project: “From Consent-Centric Data Protection Frameworks to Responsible Data Practices and Privacy Accountability in Asia Pacific,” are publishing the eleventh in a series of detailed jurisdiction reports on the status of “consent” and alternatives […]