The EU AI Act further builds on the protections of biometric data under the EU General Data Protection Regulation, Fieldfisher Senior Associate Richard Lawne, CIPP/E, CIPP/US, CIPM, writes. Lawne outlines how the AI Act classifies the use of four types of biometrics by risk, ranging from prohibited high risk and limited risk, as well as providing recommendations for navigating the overlap between the two regulations. Full story
Tools for Humanity co-founders Sam Altman and Alex Blania took the stage at the closing general session of the IAPP Global Privacy Summit 2025 in Washington, D.C., to discuss how their biometric crypto technology can change privacy when it is increasingly difficult to tell the difference between human and machine online, IAPP Staff Writer Caitlin Andrews reports. Full story
Autonomous robots with embedded AI are growing more common across industry sectors. So-called "embodied AI" collects vast amounts of data through its sensors and alters how humans interact with technology. As embodied AI becomes more common and continues to drive innovation, it also creates new challenges for ethical uses of data and personal privacy.
The U.S. Court of Appeals for the Ninth District revived a federal class-action lawsuit against Shopify after a lower court originally dismissed the lawsuit when the Canadian company successfully argued it was sued in the wrong jurisdiction, PYMNTS reports.
In a letter obtained by Politico, Gov. Gavin Newsom, D-Calif., called on the California Privacy Protection Agency Board to abandon potential finalization of the agency's draft automated decision-making regulations. "As my office has relayed to agency staff over the last year, enacting these regulations could create significant unintended consequences and impose substantial costs that threaten California's enduring dominance in technological innovation," Newsom wrote.
Members of the U.S. House Committee on Energy and Commerce sent a letter to AI company DeepSeek informing it of an investigation into its data-handling practices after the company disclosed it stores user data on Chinese servers. The letter requests DeepSeek provide information on how its AI models are trained and the methods used to protect information, as well as any U.S.
In response to a number of consumer complaints, the Hamburg Commissioner for Data Protection and Freedom of Information conducted an automated review of 1,000 randomly selected websites to learn the extent to which they deploy third-party services without consent. The review found 185 websites had third-party services embedded on their pages that track users upon accessing the sites.Full story
The Organisation for Economic Co-operation and Development released the first reports on how participants in the G7 Hiroshima AI Process Reporting Framework manage AI governance practices. The submissions came from 19 entities which detailed risk management efforts under a code of conduct for those creating advanced AI.Full story
As part of its 25th anniversary, the IAPP will celebrate 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week, we highlight the inaugural IAPP Global Privacy Summit and the foundation it laid for future installments of GPS as well as other IAPP events.Full story
Deepfake technology, leveraging AI to create hyper-realistic synthetic media, has emerged as both an innovation and a challenge to global governance. Claudia Koon Ghee Wee, AIGP, writes the technology has significant implications for privacy, misinformation, identity fraud and societal trust, and legal, regulatory and ethical frameworks are evolving to manage associated risks while upholding privacy rights and trust in the digital age.Full story