Colorado state lawmakers are considering amendments to the state's new artificial intelligence regulation, The Colorado Sun reports. Additions to the Colorado AI Act, which was signed into law in May and takes effect 1 Feb. 2026, could include defining high-risk AI systems and targeting requirements against AI developers. Meanwhile, a Lawfare op-ed called for U.S.
With the global buzz surrounding artificial intelligence technologies, organizations looking to adopt standards for program management could consider the International Organization for Standardization's new AI Management System.
The U.S. Equal Employment Opportunity Commission fined Factor One Source Pharmacy USD515,000 to settle claims it inquired about its employees' disability and medical status.
The Information and Privacy Commissioner of Ontario released guidance for public entities on privacy and transparency around third-party service provider contracting. The recommendations support "proper accountability for records and personal information throughout the procurement process."Full story
The Bavarian State Office for Data Protection Supervision published guidance for data controllers focusing on joint responsibility. The guidance details the necessary partnerships between data controllers to ensure organizations are compliant with the EU General Data Protection Regulation.Full story
The U.S. National Institute of Standards and Technology published a draft report on data protection for cloud-native applications. The report details data protection standards, categorization and strategy to protect information stored in cloud applications. The public comment deadline for the draft is 1 Aug.Full story
Reuters reports technology industry groups are urging the European Commission and the European Union Agency for Cybersecurity to make the proposed European Cybersecurity Certification Scheme for Cloud Services inclusive to large technology companies.
The fundamental question facing U.S. lawmakers pursuing comprehensive federal privacy legislation is whether it should "function as a ceiling or as a floor," writes IAPP Principal Researcher, Privacy Law and Policy, Müge Fazlioglu, CIPP/E, CIPP/US. The approach to federal preemption over a growing state privacy law patchwork will answer that question.
Ireland's Data Protection Commission announced support for Meta's decision to pause training of its large language model using Facebook and Instagram users' public posts. The DPC said it would "continue to engage with Meta on the issue." Meanwhile, U.K.
India's Union Minister for Railways, Communications, Electronics and Information Technology Ashwini Vaishnaw announced the rulemaking phase of the Digital Personal Data Protection Act implementation is nearly complete, the Times of India reports. Vaishnaw said the next phase is to open "industry-wide consultations."Full story