The Data Protection and Privacy Hub™

Microsoft’s AI ‘Recall’ feature raises security, privacy concerns: Critics say the new Copilot+ PCs’ “photographic memory” could be exploited by threat actors. #dataprotection #dataprivacy #privacy

Privacy Comes to the Bluegrass State: Kentucky Enacts a Comprehensive Data Privacy Law: On April 4, Governor Andy Beshear signed the Kentucky Consumer Data Protection Act (KCDPA), making Kentucky the fifteenth state to enact a comprehensive data privacy law. Set to go into effect on January 1, 2026, the KCDPA largely conforms to the majority of other recently enacted state data privacy laws. In particular, the law seems to have been modeled on a neighboring state: Virginia's Consumer Data Protection Act (VCDPA). The KCDPA does, however, deviate from the majority approach in a few... By: Cozen O'Connor #dataprotection #dataprivacy #privacy

EU: Council gives final approval to AI Act: On May 21, 2024, the Council of the European Union announced that it approved the Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial #dataprotection #dataprivacy #privacy

FTC settles data breach dispute with software company: The U.S. Federal Trade Commission announced it settled its order against software company Blackbaud for allegedly failing to implement cybersecurity safeguards leading to a data breach that stole consumers' personal information. Blackbaud is required to "develop a comprehensive information security program that would address the issues highlighted by the FTC's complaint and put in place a data retention schedule outlining its data deletion practices."  Full story #dataprotection #dataprivacy #privacy

ICO warns organisations must not ignore data protection risks as it concludes Snap ‘My AI’ chatbot investigation: ICO concludes investigation into Snap’s approach to assessing the data protection risks of its ‘My AI’ chatbot #dataprotection #dataprivacy #privacy

Maryland enshrines its consumer online data privacy act: On May 9, the Governor of Maryland approved SB 541 (the “Act”) which enacted the Maryland Online Data Privacy Act of 2024, setting forth new provisions for businesses and data processors under the state’s UDAP commercial code.... By: Orrick, Herrington & Sutcliffe LLP #dataprotection #dataprivacy #privacy

EU: Commission issues legally binding request for information to: On May 17, 2024, the European Commission announced that it issued a legally binding request for information to Microsoft regarding specific risks stemming from Bing's generative artificial #dataprotection #dataprivacy #privacy

A view from DC: New practical guidance for balancing fairness, privacy: IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he dives into the inevitable strain forming around the incorporation of both privacy and fairness into advanced technical systems. Full story #dataprotection #dataprivacy #privacy

A view from Brussels: From DMA, DSA enforcement to AI there's no slowing down: While Brussel's European quarter has become noticeably quieter in recent weeks, due in part to bank holidays and European Parliament's closure ahead of the June electoral campaign, IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, writes privacy activity is not slowing down. From Digital Markets Act and Digital Services Act enforcement to the next steps for the EU Artificial Intelligence Act, and more, Roccia outlines what's on her radar. Full story #dataprotection #dataprivacy #privacy

Council of Europe adopts binding treaty on AI: The Council of Europe adopted a legally binding international treaty for the use of artificial intelligence systems by public bodies and their private-sector contractors. The treaty sets a legal framework that ensures human rights, the rule of law and democratic legal standards are respected throughout the entire life cycle of an AI model. Editor's note: Explore the IAPP AI Governance Center and subscribe to the AI Governance Dashboard.  Full story #dataprotection #dataprivacy #privacy