The U.K. Information Commissioner's Office announced the conclusion of its investigation into Snap's "My AI" chatbot and closure of the enforcement notice. Following the ICO issuing a preliminary notice for possible U.K. General Data Protection Regulation violations in October 2023, Snap released a revised data protection impact assessment, which met the requirements of Article 35 of the U.K. GDPR.
The European Data Protection Board announced Croatia's Data Protection Agency Director Zdravko Vukić was elected as deputy chair.
Messaging service Signal's President Meredith Whittaker said the company would rather "cease operations" than comply with anti-encryption laws and social media surveillance tools allegedly used by law enforcement, the Guardian reports. Whittaker said the company "will fight until the end to ensure that as many people across the globe have access to meaningful privacy."Full story
The Vermont General Assembly was unable to override Gov. Phil Scott's, R-Vt., veto of the state's comprehensive privacy bill that included a precedent-setting private right of action. Washington University School of Law professor Neil Richards and Boston University School of Law professor Woodrow Hartzog offered their take on the justification for the veto and why the stigma attached to the PRA "suggests that companies ought to be above the law" in relation to consumer harms.Full story
Colorado state lawmakers are considering amendments to the state's new artificial intelligence regulation, The Colorado Sun reports. Additions to the Colorado AI Act, which was signed into law in May and takes effect 1 Feb. 2026, could include defining high-risk AI systems and targeting requirements against AI developers. Meanwhile, a Lawfare op-ed called for U.S.
With the global buzz surrounding artificial intelligence technologies, organizations looking to adopt standards for program management could consider the International Organization for Standardization's new AI Management System.
The U.S. Equal Employment Opportunity Commission fined Factor One Source Pharmacy USD515,000 to settle claims it inquired about its employees' disability and medical status.
The Information and Privacy Commissioner of Ontario released guidance for public entities on privacy and transparency around third-party service provider contracting. The recommendations support "proper accountability for records and personal information throughout the procurement process."Full story
The Bavarian State Office for Data Protection Supervision published guidance for data controllers focusing on joint responsibility. The guidance details the necessary partnerships between data controllers to ensure organizations are compliant with the EU General Data Protection Regulation.Full story
The U.S. National Institute of Standards and Technology published a draft report on data protection for cloud-native applications. The report details data protection standards, categorization and strategy to protect information stored in cloud applications. The public comment deadline for the draft is 1 Aug.Full story