In a brief video, Equifax Chairman and CEO Rick Smith announced the news and the steps the company is taking in its breach response, saying the company "acted immediately to stop the intrusion" and ...

Mayer Brown's Arsen Kourinian details laws in California and New York that may require vehicle manufacturers to provide domestic abuse survivors and drivers the right to terminate an abuser's access ...

In a widely discussed move,Meta gave Facebook and Instagram users the choice between paying for an ad-free experience or keeping the services free of charge using ads. The legal reality behind that ...

The U.S. state of Iowa is no stranger to privacy bills. Since its first attempt in 2020, the state's legislature has repeatedly proposed and considered comprehensive consumer data privacy legislation.

Littler Mendelson's Zoe Argento analyzes data protection issues for employers using generative AI services.

This post analyzes CPRA's categories of sensitive personal data, company obligations, whether CPRA is a good model for regulating sensitive personal data.

Anonymization and pseudonymization are two terms that have been the topic of much discussion since the introduction of the General Data Protection Regulation. This is for good reason, too. The GDPR ...

The wait for a finalized agreement to solidify EU-U.S. data flows is winding down. The latest step forward in the process came with U.S. President Joe Biden's long-awaited executive order mandating ...

Data de-identification has many benefits in the context of the EU General Data Protection Regulation. One of the recurring questions is whether consent is required to anonymize or de-identify data. In ...

And a lot of organizations will have to do that calculus: Earlier this year, an IAPP study conservatively estimated that, once the GDPR takes effect, at least 28,000 DPOs will be needed in Europe and ...

The EU Artificial Intelligence Act is not yet published in the Official Journal of the European Union, yet its unquestionably disruptive value as the world's first legislative effort to regulate AI is ...

The CCPA defines “personal information” to include online identifies such as an IP address, but only if the identifier “identifies, relates to, describes, is reasonably capable of being associated ...