The allegations in Healthline will be familiar to observers of privacy enforcement cases in recent years in the U.S. First, the attorney general alleges that Healthline's opt-out tools and consent ...

Mayer Brown's Arsen Kourinian details laws in California and New York that may require vehicle manufacturers to provide ...

While only a few jurisdictions have passed laws specific to artificial intelligence governance, the regulatory application of existing laws to the governance of AI technologies has happened at a much ...

Most importantly, for the current uses of and innovations in AI, model cards provide details about the construction of the machine learning model, like its architecture and training data. Seeing what ...

This post analyzes CPRA's categories of sensitive personal data, company obligations, whether CPRA is a good model for regulating sensitive personal data.

A view from Brussels: Will the EU pause the AI Act? The scope of the CPA is reminiscent of the CDPA and CCPA but includes a few notable differences. The CPA applies to any controller that: “Conducts ...

The updated version of this tool, including a new state law tracker map, now exists on the IAPP Resource Center,which you can find here. While the text on this page will not be updated going forward, ...

The wait for a finalized agreement to solidify EU-U.S. data flows is winding down. The latest step forward in the process came with U.S. President Joe Biden's long-awaited executive order mandating ...

In this instance, the vendor must "disgorge" — or, surrender, yield or expunge — data they have processed on behalf of the company. Such language is so common it has even been codified into the EU ...

The CCPA defines “personal information” to include online identifies such as an IP address, but only if the identifier “identifies, relates to, describes, is reasonably capable of being associated ...

The recent U.S. Supreme Court decision in TransUnion LLC v. Ramirez, which addressed the issue of standing in the context of class certification in a FCRA case, is expected to further shape the ...

Even 10 years on, Edward Snowden's disclosures of U.S. government surveillance programs continue to make an impact on law and policy debates, particularly those involving privacy. His actions changed ...