Goodwin Procter Partners Omer Tene and Jacqueline Klosek, CIPP/US, write that 2025 could prove to be an uncertain year for the U.S. technology industry with President-elect Donald Trump set to take office and both chambers of U.S. Congress under Republican leadership.
The Cyberspace Administration of China announced a public consultation on draft measures for certifying personal data transferred out of China. The CAC's measures outline the definition of a transfer, criteria certification bodies must consider when reviewing a potential data export and requirements for accredited certification bodies. The consultation is open through 3 Feb.Full story
In an op-ed for Tech Policy Press, Electronic Privacy Information Center Deputy Director Caitriona Fitzgerald and Consumer Reports Policy Analyst Matt Schwartz broke down their model legislation for comprehensive U.S. state privacy law.
The Delaware attorney general's office outlined consumer rights and business requirements under the state's comprehensive data privacy law, which took effect 1 Jan. Meanwhile, state Sen.
Denmark's data protection authority, Datatilsynet, announced its anticipated supervisory activities for 2025. The Datatilsynet's plan includes initiatives to tackle children's safety, digital tracking in real life, and processing personal data in multistate information systems and more.Full story
Germany's Federal Office for Information Security, the Bundesamt für Sicherheit in der Informationstechnik, explored the limits of explainable AI in an adversarial context. The BSI noted, while better understanding AI's so-called "black box" decision-making, explanations can be manipulated and compromised if there is disagreement on interpretation.Full story
The U.S. Food and Drug Administration released draft guidance on the development of AI-powered devices and transparency with marketing those AI capabilities.
Norway's data protection authority, Datatilsynet, said, while it supports aspects of the proposed amendments to the Health Research Act, the agency believes the reform should maintain the bill's current third-party ethics assessments.
Washington Attorney General Bob Ferguson filed a lawsuit against T-Mobile for a 2021 data breach that compromised the personal data of 79 million consumers, TechCrunch reports. Ferguson said the company did not enable adequate cybersecurity safeguards and "omitted critical information and downplayed the severity" of the incident when informing consumers about the data breach. Full story
The U.S. Cybersecurity and Infrastructure Security Agency finalized security requirements for classes of restricted transactions by U.S. persons as part of the Department of Justice's final rule on sensitive data transfers to countries of concern.