The Vermont Legislature granted final passage to Senate Bill 69, the Age-Appropriate Design Code Act. The bill mandates default privacy and safety settings for children under 18 and requires online content platforms to restrict certain content and turn off addictive features. If enacted by the governor, the bill will take force 1 Jan. 2027.Full story
As part of its 25th anniversary, the IAPP celebrates 25 trailblazing innovators and 25 defining moments in the last quarter century that helped establish the privacy and digital governance profession. This week, we highlight the pioneering work of Nuala O'Connor, CIPP/G, and her influence on the broader public and private-sector privacy communities.Full story
FTI Consulting Managing Director of Technology Tim de Sousa, AIGP, CIPP/E, CIPM, FIP, offers a one-on-one comparison of privacy statutes in Australia and the EU. He examines how provisions of the Australia's Privacy Act, updated December 2024, align or depart from the EU General Data Protection Regulation. Full Story
The European Data Protection Board published the agenda of its 3 June plenary meeting. Notably, the board will discuss a joint opinion with the European Data Protection Supervisor on the simplification of recordkeeping requirements under Article 30(5) of the EU General Data Protection Regulation.
Despite three out of five small- and medium-sized businesses already using or planning to use AI within the next two years, "few SMBs are prepared for the accompanying risks," voyAlge Strategy co-founder, Vice President, Chief Privacy Officer, Chief AI Officer, Managing Editor and Chief Operating Officer Christina Catenacci, and co-founder, President and CEO Tommy Cooke, Ph.D., write.
Employees are utilizing AI more frequently at work; however, they are hiding its use from their employers, Axios reports. A survey from software security firm Ivanti found 36% of employees reported their leading motivation for shielding AI use at work was to gain a "secret advantage." Meanwhile, the White House is reportedly weighing how to balance its commitments to protect the job security of U.S.
Nebraska Legislative Bill 504, the Age-Appropriate Online Design Code Act, was voted out of the state legislature 28 May. The bill, introduced and supported by Gov. Jim Pillen, R-Neb., requires technology companies to take added measures to safeguard children's personal data, empower parents to manage and control their children's privacy and account settings, and place restrictions on tech companies to target children and encourage excessive use.
The European Commission is working to speed up its report on incorporating quantum computing in the bloc, Euronews reports. The measure is expected to call for member state cooperation to implement the European Declaration on Quantum Technologies and show the EU is looking to scale its own digital capabilities.Full story
The Chertoff Group Senior Advisor Daniel Sutherland, CIPP/G, and IAPP Cybersecurity Law Center Managing Director Jim Dempsey wrote for Lawfare to examine the Trump administration's support of the U.S. law banning bulk sensitive data transfers to adversarial regimes that was established under the Biden administration. Sutherland and Dempsey recap how the Biden order came to be viewed as a critical national security tool, which includes the banning of Kaspersky software in the U.S.
Wired reports data analytics company LexisNexis Risk Solutions disclosed more than 360,000 consumers' sensitive information was stolen in a recent data breach of a third-party supplier. Names, birthdates, phone numbers, postal and email addresses, Social Security numbers, and driver license numbers were among the information breached.