The IAPP Research and Insights team published the first US State AI Governance Legislation Tracker. The resource provides an overview of bills introduced in state governments throughout the U.S. that directly impact private sector organizations' use of various artificial intelligence technologies. Full story
The European Commission sent a warning to 18 member states that they have not implemented the necessary measures to comply with the Data Governance Act. The countries have two months to add the necessary safeguards and transparency requirements to ensure compliance. Full story
In an op-ed for Euractiv, three EU artificial intelligence policy leaders argued the AI Office will need dynamic leadership if it is to implement the AI Act successfully. They laid out how the office should be structured with five units equipped to deal with the specific nuances of AI governance.Full story
Former chief executive of the National Cyber Security Centre Ciaran Martin claimed the U.K. government is not prepared to navigate cybersecurity threats from China, the Guardian reports. Martin said the U.K. has "not paid enough attention to a gamechanging warning from the US that China is planning disruption to key critical infrastructure," after the U.S.
Norway's data protection authority, Datatilsynet, issued a response to proposed changes to the country's Civil Protection Act that would allow for citizens' personal data to be collected in crisis situations.
Spain's data protection authority, the Agencia Española de Protección de Datos, updated its Manage GDPR tool that aims to help organizations comply with the EU General Data Protection Regulation. The upgrade featured 800 privacy additions "identified by the organization, also including aspects such as governance, security and management of personal data breaches." Full story
The Office of Privacy Commissioner for Personal Data in Hong Kong told cryptocurrency project Worldcoin Foundation to stop operating within the country due to concerns about its privacy and data practices, Reuters reports. The company's biometric-collection practices have sparked regulations and fines in several countries, which Worldcoin has disputed.Full story
The U.S. House Committee on Energy and Commerce announced the Subcommittee on Innovation, Data and Commerce will hold a markup session 23 May, which features two privacy-centric pieces of legislation. Bills up for deliberation include new discussion drafts of the American Privacy Rights Act and Kids Online Safety Act.Full story
The U.S. Chamber of Commerce published a joint letter with 15 state chambers to members of Congress declaring their opposition to the draft American Privacy Rights Act.
The European Data Protection Board published the agenda for its 23 May plenary meeting. Key items for consideration include a request for a mandate on generative artificial intelligence and a discussion on issuing guidelines on pay-or-consent models for social media platforms.Full story