In a few hours FPF CEO Jules Polonetsky will speak with Dr. Gabriela Zanfir-Fortuna, Fox Rothschild’s Odia Kagan, & Christopher Kuner about the details of Uber’s recent data transfer fine. Join us TODAY at 12:00 pm ET! linkedin.com/events/thecomp…

Figuring out who determines the purpose and means of processing for each link in the AI processing chain, might be even harder for companies buying and using AI tools than it is for my kids to figure out whose turn it is to unload the dishwasher today (and that's saying

The supervisory practice of the Saxon Data Protection and Transparency Commissioner issues guidance on redaction for fulfilling the data minimization requirement under data protection laws. On Face blurring: 🔹️If faces, license plates or other personal are to be made

Transparency might be the most important food group in data privacy compliance. Especially with the Federal Trade Commission, Office of the New York State Attorney General (tinyurl.com/yetxmdez) and California Privacy Protection Agency (linkedin.com/posts/odiakaga…) focusing their

What issues are we discussing with clients following the publication of new regulations for the Colorado CPA just proposed for consultation: Biometrics: [supplementing the revision to the CPA effective 7/1/25] 🔹 Will need written acknowledgement for digital or physical

What are we discussing with our clients in connection with the new wave of lawsuits pertaining to data sharing in the automotive industry (with lessons applicable to all industries): 🔹 Personal data is broader than you think: Things like average speed; acceleration events, hard

In the words of #privacyHardy (lnkd.in/emx_v3tY) My GenAI is preciser than your GenAI - what are we discussing with clients regarding their disclosures for #GenAI products following the new Texas AG enforcement against Pieces Technologies Inc. "AI companies offering

Telling a woman when she’s wrong isn’t mansplaining, it’s treating her as an equal

I'm sure a lot has been speculated about what's going on in Western North Caolina. I'm a resident. One who has just now got enough of a signal to access the internet for more than a minute or two at a time. I'll explain.

Latvian DPA Datu valsts inspekcija/Data State Inspectorate of Latvia weighs in on how to make your privacy notice available to individuals: 🔹️Posting on the website is not enough. You must always take proactive steps to provide people with the relevant information or tell

What are we discussing with clients who are healthcare facilities about their use of #GenAI after CA AB3030 has been signed into law by Governor Newsom: Who is in scope: A health facility, clinic, physician’s office, or office of a group practice that use generative artificial

The kids' laws are (not) alright: In California, Governor Newsom vetoes AB 1949 which would have required “affirmative authorization” (undefined) either from a parent/guardian or teen user for any collection, sale, sharing, use, or disclosure of the data of minors under age 18.

There is PI in my AI (system) says new amendment to CCPA signed into law by Governor Newsom. Per the new amendment: “Personal information” can exist in various formats, including, but not limited to, all of the following: (A) Physical formats, including paper documents, printed

Commercial Interest: no longer the illegitimate child of GDPR legal basis; per new CJEU decision: In a new decision, on the sale of the contact information of members of a sports clubs, the CJEU decision clarifies that a commercial interest can indeed be "legitimate" for the

Why are we discussing the CJEU decision in the Max Schrems 🇪🇺/ Meta data minimization case with our US company clients? Data minimization: 🔹️The Court said that in order to aggregate, analyse and process, for the purposes of targeted advertising, in compliance woth the GDPR

Quantum data protection challenges incoming... ICO - Information Commissioner's Office issues report on Quantum technologies and data protection. What are we discussing with clients? 🔹️From an information security perspective: companies should be adopting post-quantum cryptography technologies to

After recent Federal Trade Commission enforcement order specifically calls out retention limitation of customer records, new decisions from France CNIL - Commission Nationale de l'Informatique et des Libertés are useful for US companies trying to figure out data minimization and

More than just cookies. What are we discussing with clients about the applicability of the Section 5(3) of the ePrivacy directive pursuant to the new EDPB guidelines (...and nothing about the need for consent, that's for a future episode). 🔹️It's not just about personal

What are we discussing with clients after a new Second Circuit decision on the Video Privacy Protection Act (VPPA): 🔹️ You should get your video tracking in order even if you are not a streaming company. Per the court: The phrase 'goods or services' in the VPPA is not cabined

The regulators have entered the Chat. Chatbots do's and don't for restaurants and beyond from my talk with the Restaurant Technology Network yesterday: 🤖Know your bot - If you are using a bot/AI bot - you need to tell people that they are not speaking to a human; and that AI