Systematic artificial intelligence testing, or red teaming, focuses on testing generative AI systems to avoid potential legal liabilities. Luminos.Law's Andrew Eichen, Ekene Chuks-Okeke and Brenda Leong, AIGP, CIPP/US, analyzed organizations' use of red teaming to navigate risks associated with AI. Full story
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he peels back the layers on both the interplay and unique difference between U.S. state privacy and consumer protection enforcement.Full story
The 118th U.S. Congress' term is winding down. Federal lawmakers raised various privacy-focused bills during the two-year cycle. This updated IAPP tracker accounts for the most recent legislative developments around notable privacy proposals during the 2023-2024 session.Full story
In May 2024, the U.S. National Institute for Standards and Technology launched a new program called ARIA, Assessing and Impacts of AI. Its aim is to advance sociotechnical testing and evaluation of artificial intelligence by developing methods to quantify how a given system works within real-world contexts. Potential outputs include scalable guidelines, tools, methodologies and metrics.
Poland's data protection authority, Urząd Ochrony Danych Osobowych, published guidance for data protection compliance measures related to the Act on Counteracting Threats of Sexual Crime. The UODO suggested organizations perform risk assessments, assign an administrator to verify compliance with privacy laws and enable adequate data protection standards to ensure personal data collected by organizations is secure.Full story
The New York Times reports state lawmakers amended California Senate Bill 1047, which would require developers of artificial intelligence technologies to undergo safety testing before new models could be released to the public and would subject them to penalties if their models caused significant public harm. The changes to the penalty structure would only apply to AI models that create real-world harms and would not apply if violations occur during testing phases.
The South China Morning Post reports stakeholders are urging Hong Kong to ramp up privacy law reform efforts.
Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, recognized the six-year anniversary of the General Data Protection Law. It noted the several studies, frameworks and enforcement actions the agency has taken under the law to protect citizens' personal data since its creation in 2019.
IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes European-interested privacy professionals should add the second report on the application of the EU General Data Protection Regulation to their summer reading lists. Roccia outlines objectives within the 32-page report, published 25 July by the European Commission, including robust enforcement and advancing the Commission's international strategy on data protection.Full story
Flight tracking website FlightAware exposed users' personally identifiable information due to a "configuration error," 404 Media reports. Users' professional and personal data were breached, including pilot status, addresses, Social Security numbers and IP addresses. Full story