Articles from Around the Web

Op-ed: Why the veto of Vermont's comprehensive privacy law is 'terrible for privacy'

The Vermont General Assembly was unable to override Gov. Phil Scott's, R-Vt., veto of the state's comprehensive privacy bill that included a precedent-setting private right of action. Washington University School of Law professor Neil Richards and Boston University School of Law professor Woodrow Hartzog offered their take on the justification for the veto and why the stigma attached to the PRA "suggests that companies ought to be above the law" in relation to consumer harms.Full story

Colorado lawmakers pledge to tighten AI law

Colorado state lawmakers are considering amendments to the state's new artificial intelligence regulation, The Colorado Sun reports. Additions to the Colorado AI Act, which was signed into law in May and takes effect 1 Feb. 2026, could include defining high-risk AI systems and targeting requirements against AI developers. Meanwhile, a Lawfare op-ed called for U.S.

Outlining the key details of ISO's new AI Management System standard

With the global buzz surrounding artificial intelligence technologies, organizations looking to adopt standards for program management could consider the International Organization for Standardization's new AI Management System.

US pharmacy fined $515K over alleged privacy violations

The U.S. Equal Employment Opportunity Commission fined Factor One Source Pharmacy USD515,000 to settle claims it inquired about its employees' disability and medical status.

Ontario IPC issues guidelines for third-party contracting

The Information and Privacy Commissioner of Ontario released guidance for public entities on privacy and transparency around third-party service provider contracting. The recommendations support "proper accountability for records and personal information throughout the procurement process."Full story

Bavaria DPA publishes joint responsibility guidance

The Bavarian State Office for Data Protection Supervision published guidance for data controllers focusing on joint responsibility. The guidance details the necessary partnerships between data controllers to ensure organizations are compliant with the EU General Data Protection Regulation.Full story

NIST drafts report on data protection for cloud applications

The U.S. National Institute of Standards and Technology published a draft report on data protection for cloud-native applications. The report details data protection standards, categorization and strategy to protect information stored in cloud applications. The public comment deadline for the draft is 1 Aug.Full story

Technology industry groups urge inclusive cybersecurity certification proposal

Reuters reports technology industry groups are urging the European Commission and the European Union Agency for Cybersecurity to make the proposed European Cybersecurity Certification Scheme for Cloud Services inclusive to large technology companies.

Ceiling or floor? The debate on preemption in US privacy legislation

The fundamental question facing U.S. lawmakers pursuing comprehensive federal privacy legislation is whether it should "function as a ceiling or as a floor," writes IAPP Principal Researcher, Privacy Law and Policy, Müge Fazlioglu, CIPP/E, CIPP/US. The approach to federal preemption over a growing state privacy law patchwork will answer that question.

Ireland's DPC discusses Meta's AI training data pause

Ireland's Data Protection Commission announced support for Meta's decision to pause training of its large language model using Facebook and Instagram users' public posts. The DPC said it would "continue to engage with Meta on the issue." Meanwhile, U.K.

Search form

Search form

Search form

Discover the latest industry insights and developments with our News from Around the Web page. We curate feeds from a variety of reputable organizations, bringing you a comprehensive overview of relevant news and trends. Stay informed and connected with the most current updates from across the web.

Sign Up For Our Newsletter