The recent decision from the European Data Protection Board clarifying obligations of data processors under the EU General Data Protection Regulation "works through a number of tricky areas affecting controller-processor-subprocessor relationships," Bird & Bird Partner Ruth Boardman writes.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and AI governance developments in the nation's capital and around the U.S. This week, he dissects the impactful aspects and nuances contained in the U.S. Federal Trade Commission's recent privacy settlement with Marriott.Full story
EU institutions are being overhauled following the June elections, but legacy files from the previous term continue to land. NIS2, the CRA and PLD2 are the latest legislative acronyms to take note of for cybersecurity and AI liability, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes, outlining the details and changes within the NIS2 Directive, Cyber Resilience Act and Product Liability Directive.Full story
Prominent AI models have fallen short of EU regulations governing cyber resiliency and preventing discriminatory output, according to data reviewed by Reuters. The publication obtained the results of a tool developed by Swiss startup LatticeFlow AI, and research partners ETH Zurich and Bulgaria's INSAIT that scored AI models on a rubric between 0 and 1 across multiple categories, such as technical capabilities and safety.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, called for stakeholder comments regarding agency priority items and initiatives for its 2025-2026 regulatory agenda. Interested parties have until 31 Oct. to submit comments.Full story
Former Google Chief Privacy Officer Keith Enright, AIGP, CIPP/G, CIPP/US, reflected on his career and how digital regulatory compliance is a constantly adapting process during this recorded keynote speech at the IAPP Privacy. Security. Risk 2024.Full story
New Zealand Privacy Commissioner Michael Webster said, while law enforcement agencies have worked to comply with several privacy obligations laid out in a 2021 privacy notice on biometric data, police still need to ensure unlawfully collected data is deleted from its systems.
European Data Protection Supervisor Wojciech Wiewiórowski told Key4biz he is feeling more supportive of the EU AI Act as a way to deal with AI in the EU, saying its approach to product and service safety strikes the right regulatory balance.
Baker Donelson Of Counsel David Oberly wrote for BiometricUpdate about the increasing challenges for insurance policyholders after the Illinois First District Appellate Court ruled in Tony's Finer Foods Enters. v. Certain Underwriters at Lloyd's, London, that Illinois Biometric Information Privacy Act claims fall outside of a cyber liability policy.Full story
Tools for Humanity's World Network, previously known as Worldcoin, developed services to allow users in Latin America to have the technology delivered to their homes, Wired reports. The company is aiming to make it easier for users to sign up for its orb scanning database despite concerns over the company's use of biometric data.Full story