News and Alerts for May 9, 2022
New Privacy Coalition Gathers to Set Agenda The newly-created Global Cross-Border Privacy Rules Forum-—an international association of countries that includes ..
EDPB Guidance for Dark Patterns
On March 14, the European Data Protection Board (EDPB) published draft guidelines on “dark patterns.” The guidelines are intended to ..
Connecticut Privacy Law Explainer
On April 28, the Connecticut House of Representatives voted 144-5 in support of Senate Bill 6, the Connecticut Data Privacy ..
THREAT ALERT: AI Data Poisoning
Machine Learning (ML) and Artificial Intelligence (AI) has been influencing information security and governance for many years. These technologies are ..
Sri Lanka Enacts Data Privacy Law
On March 18, Sri Lanka enacted the Personal Data Protection Act, No. 9 of 2022 (PDPA) and became the first ..
Status Update on Privacy Shield Replacement
On March 25, the European Commissioner for Justice Didier Reynders, and U.S. Secretary of Commerce Gina Raimondo issued a joint ..
Saudi Arabia’s Data Protection Law: The Personal Data Protection Law
On March 10, the Kingdom of Saudi Arabia’s Saudi Data & Artificial Intelligence Authority (SDAIA) issued a draft version of ..
FTC Mandates Algorithm Destruction for Improper Use of AI
Under the provisions of the Federal Trade Commission (FTC) Act (Act), the FTC has the authority to enforce various antitrust ..
Why Organizations Need to Start Implementing Data Minimization
When the European Union (EU) enacted the General Data Protection Regulation (GDPR) on May 2, 2018, the world was introduced ..
An Understandable Guide to Zero Trust Architecture (“ZTA”)
While cybersecurity professionals are generally nice people, and I have nothing against them, they have trust issues. Their spouse, friends, ..
Commerce Department Moves to Regulate Data Privacy
The Biden Administration continues its foray into the debate over privacy policy in the United States. On Tuesday, November 30, ..
CNIL Publishes White Paper on Digital Payments and Data Privacy
The French Data Protection Authority’s white paper discusses how companies can comply with data privacy and security obligations. The use