IAPP Staff Writer Alex LaCasse reports from the IAPP's Navigate Leadership Retreat in Portsmouth, New Hampshire about how policymakers and stakeholders view novel legal and copyright issues associated ...

This report provides insights on building an AI governance program and professionalizing AI governance.

While only a few jurisdictions have passed laws specific to artificial intelligence governance, the regulatory application of existing laws to the governance of AI technologies has happened at a much ...

And so, yet again, a new legal theory is beginning to take root to blunt the impact of state privacy regulation. Specifically, some are suggesting the CPRA’s amendment of the CCPA provides, except for ...

The Data Care Act of 2023, sponsored by Sen. Brian Schatz, D-Hawaii, imposes various duties — a duty of care, duty of loyalty and duty of confidentiality — on online service providers. The duty of ...

The wait for a finalized agreement to solidify EU-U.S. data flows is winding down. The latest step forward in the process came with U.S. President Joe Biden's long-awaited executive order mandating ...

In a widely discussed move,Meta gave Facebook and Instagram users the choice between paying for an ad-free experience or keeping the services free of charge using ads. The legal reality behind that ...

The debate around preemption within federal privacy legislation in the U.S. can be boiled down to a simple question: Should a federal data privacy law function as a ceiling or as a floor?

Despite that, a lot has been said about similarities between the GDPR and CCPA and still more about significant differences. Understanding third parties and related requirements is where practical ...

A View from DC: California enforcement shows the continued importance of consumer expectations We are in the midst of a global pandemic, and the need to access COVID-19-related data has become ...

On May 4, 2022, Connecticut became the fifth U.S. state to enact comprehensive consumer privacy legislation.

A culture of privacy provides a shared understanding of how personal data can and should be used to support broader strategic objectives. This improves the ability of the privacy program to execute ...