Estonia's Data Protection Inspectorate issued guidance for e-commerce companies on protecting consumer data under the EU General Data Protection Regulation and the Electronic Communications Act. DPI Data Security Expert Eleri Pilliroog said companies' efforts to bolster data protection could prevent security incidents as a "data leak can result in both financial losses and permanent reputational damage.
Italy's data protection authority, the Garante, opened a public consultation on newspaper publishers' use of pay-or-consent models. The Garante noted the consultation "aims to avoid a merely punitive approach by the authority" and not adversely impact the newspapers' economic viability. The consultation is open for 60 days.Full story
Abu Dhabi Global Market's Financial Services Regulatory Authority is soliciting for feedback on its proposed cybersecurity risk management framework that aims to update its current Information Technology Risk Management Guidance. Stakeholders will have until 11 June to respond to the FSRA's consultation.Full story
With the launch of the IAPP's 2025 Digital Governance Survey, IAPP Principal Researcher for Privacy Management Saz Kanthasamy, CIPP/E, CIPM, FIP, writes attention to digital governance has increased in recent years thanks to "an environment where there is greater geopolitical flux, increased pressure to tighten budgets and rapid developments in internal and external environments." He explained this year's survey "seeks insights from those working in privacy functions, AI governance functions and
The IAPP Global Privacy Summit 2025's keynote stage featured thought-provoking discussion and insights into various facets of the digital governance landscape. U.S. Federal Trade Commissioner Melissa Holyoak covered her priorities around children's privacy, AI and precise enforcement during her keynote remarks.Full story
Beyond the developers of large language models, deployers of AI technologies need to be aware the EU AI Act's directive on "'copyright and related rights in the Digital Single Market' still (applies) to anyone attempting to use a copyrighted work," Magdalena Serafin, AIGP, CIPP/US, writes. She provides an overview of the AI Act's copyright requirements, such as training AI models, compliance for general-purpose models and ensuring web crawlers follow machine-readable opt-outs.Full story
The California Privacy Protection Agency Board approved a new public comment period on revised draft regulations governing automated decision-making technology, cybersecurity audits and risk assessments. The revised regulations were primarily viewed by board members as an attempt to ease business compliance burdens. IAPP Staff Writer Alex LaCasse reports on the CPPA Board's deliberations.Full story
Ireland's Data Protection Commission delivered its final decision on TikTok's alleged unlawful EU data transfer, fining the company 530 million euros and proposing a potential ban on EU transfers to China if corrective measures are not adopted in the coming months. The DPC also highlighted new revelations regarding TikTok's storage of EU data on Chinese servers, which may bring further scrutiny.
IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and AI governance developments in the nation's capital and around the U.S. This week, he analyzes proposed amendments to the Colorado AI Act under consideration after submission by the Colorado General Assembly's Artificial Intelligence Impact Task Force.Full story
IAPP Managing Director, Europe, Isabelle Roccia, CIPP/E, highlights the latest on the EU Digital Markets Act and AI Act since they took effect. Since the DMA's application, Executive Vice-President for a Clean, Just and Competitive Transition Teresa Ribera said the European Commission designated gatekeepers and more, and will continue to enforce the law.