First is the General Data Protection Regulation (GDPR), now the EU Artificial Intelligence Act (EU AI Act). The European Union once again emerges as the first body to develop and enforce a comprehensive privacy regulation. This legislation aims to regulate the development, deployment, and use of artificial intelligence (AI) systems within the EU, emphasizing transparency, accountability, and the protection of fundamental rights. Earlier this year, the member states of the European Parliament unanimously endorsed the EU AI Act. However, the law is yet to be formally endorsed by the Council ..read more

In April of last year, the privacy world witnessed a landmark ruling around automated decision-making by AI systems issued by the Court of Justice of the European Union against SCHUFA. This ruling provided insights into the enforcement of automated decision-making by regulatory bodies, setting a precedent for similar cases to follow. Businesses are employing AI systems at an increasing rate. A recent study conducted by Forbes Advisor, surveying 600 business owners, found Customer Service to be the most popular application of AI, with 56% of respondents using AI for this purpose.  ..read more

On the evening of Friday, March 15, the Artificial Intelligence Policy Act was signed by Utah's Governor Spencer Cox and is said to take effect from May 1, 2024. Its main focus is to promote responsible use of AI in private sector businesses, protecting the sanctity of Privacy Laws laid out all over the country. Being the first to produce a bill vouching for AI safety, Utah's mission mandates the inclusion of Human Intervention in AI processes.    Key Definitions Artificial Intelligence: Defined as any technology capable of performing tasks or exhibiting behaviors that typicall ..read more

Class Action Lawsuits Filed Against Major Companies Over Data Breaches Consumers have initiated class action lawsuits against AT&T, Change Healthcare, GardaWorld, SouthState Bank, WellNow Urgent Care, The Aspen Group, Golden Corral, and American Vision Partners for alleged data breaches. These lawsuits claim the companies failed to prevent consumer data exposure, resulting in compromised personal and private information. Filed in U.S. federal courts, the lawsuits assert negligence in safeguarding data, with allegations ranging from inadequate cybersecurity measures to delayed notificat ..read more

Key highlights from the draft American Privacy Rights Act Last week, bipartisan U.S. lawmakers introduced the American Privacy Rights Act (APRA), enhancing consumer privacy legislation. Spearheaded by Chairs Cathy McMorris Rodgers and Maria Cantwell, the draft extends regulations to non-profits and introduces a private right of action. Notably, it mandates data minimization and explicit consent for sensitive data transfer. Moreover, the bill introduces heightened protections for teen data, opt-out rights, and AI governance requirements. Large data holders and high-impact social media compa ..read more

IAPP GPS 2024: Anticipating the Future of AI Regulation Enforcement At the IAPP Global Privacy Summit 2024, discussions revealed the challenges of aligning AI with privacy regulations like the GDPR and the upcoming EU AI Act. Regulators and industry leaders emphasized the need for a legal basis in data collection for AI, addressing challenges in global regulation conformity and data scraping. With AI's advancement, there's a critical balance between innovation and privacy, underscored by legal actions against companies for data misuse and the call for global standards in AI governance. Re ..read more

'Data mapping' is considered the foundational step for any privacy program. In the past we have written about: - Understanding DataMaps How to develop a current and effective datamap How can you Maximize the Benefits of your Data Map  The Challenges in Building an Effective Data Map Today we plan to focus on how DataMap can help with measurement and tracking of various metrics.   As a company that helps other organizations build and sustain their privacy programs, we have years of experience building and working with DataMap's and we've found that a strong and efficient DataMap ha ..read more

Recently, we've seen increased regulatory focus around risk assessment and management. Up until September 2023, the Colorado Privacy Act (CPA) and the California Consumer Privacy Act (CCPA) were the two state regulations known for setting clear guidelines for data protection assessments. In September of last year, the California Privacy Protection Agency (CPPA) released draft rules on risk assessments. The release includes several regulations, some notable ones that mandate businesses to conduct and document detailed risk assessments for Personal Information (PI) processing activities and upd ..read more

A view from Brussels: GDPR 'still in the making' 8 years later The European Commission is gearing up to release its second report on the EU General Data Protection Regulation (GDPR) after consulting stakeholders and receiving over 260 submissions. While stakeholders universally praise the GDPR's role in enhancing personal data protection, they also highlight implementation challenges and call for improvements in enforcement, coherence with other data-related legislation, and guidance from data protection authorities. Meanwhile, EU negotiators have reached a provisional agreement on the Europea ..read more

Big Data Analytics to reach $47.2 billion by 2031 The global Big Data Analytics in Semiconductor & Electronics market is projected to reach $47.2 billion by 2031, driven by increased adoption of analytics software and cloud computing advancements. Despite pandemic-related setbacks, factors like faster decision-making and business insights propel market growth, with North America leading in 2021. The electronics segment dominates, while supply chain analytics is expected to witness the fastest growth. COVID-19 disruptions are anticipated to recede, paving the way for market recovery and ex ..read more