IAPP Staff Writer Alex LaCasse reports from the IAPP's Navigate Leadership Retreat in Portsmouth, New Hampshire about how policymakers and stakeholders view novel legal and copyright issues associated ...

The Data Care Act of 2023, sponsored by Sen. Brian Schatz, D-Hawaii, imposes various duties — a duty of care, duty of loyalty and duty of confidentiality — on online service providers. The duty of ...

In a widely discussed move,Meta gave Facebook and Instagram users the choice between paying for an ad-free experience or keeping the services free of charge using ads. The legal reality behind that ...

A View from DC: California enforcement shows the continued importance of consumer expectations We are in the midst of a global pandemic, and the need to access COVID-19-related data has become ...

And so, yet again, a new legal theory is beginning to take root to blunt the impact of state privacy regulation. Specifically, some are suggesting the CPRA’s amendment of the CCPA provides, except for ...

While only a few jurisdictions have passed laws specific to artificial intelligence governance, the regulatory application of existing laws to the governance of AI technologies has happened at a much ...

Most importantly, for the current uses of and innovations in AI, model cards provide details about the construction of the machine learning model, like its architecture and training data. Seeing what ...

How does the service-provider exception play out in practice? Website-hosting provider A website-hosting provider would be a logical vendor to consider as a service provider, depending on the ...

Even 10 years on, Edward Snowden's disclosures of U.S. government surveillance programs continue to make an impact on law and policy debates, particularly those involving privacy. His actions changed ...

This post analyzes CPRA's categories of sensitive personal data, company obligations, whether CPRA is a good model for regulating sensitive personal data.

Data de-identification has many benefits in the context of the EU General Data Protection Regulation. One of the recurring questions is whether consent is required to anonymize or de-identify data. In ...

The U.S. state of Iowa is no stranger to privacy bills. Since its first attempt in 2020, the state's legislature has repeatedly proposed and considered comprehensive consumer data privacy legislation.