The EU Artificial Intelligence Act was carefully crafted with a risk-based approach to regulating AI — heavily regulating high-risk AI models, lightly regulating generative AI models with systemic risk and leaving low-risk models alone. Not all purchasers of AI functionality have adopted this risk-...

In our digitally connected world, safeguarding personal data is essential. The question is, how can government and business collaborate to achieve this critical goal? At present, 137 countries have privacy laws and regulations in place — covering more than three-quarters of the world population — w...

Cookie management — whether that means obtaining consent or otherwise — is required by most privacy and data protection laws. In Europe and elsewhere around the world, consent is required for the use of nonessential cookies, think tracking or analytics cookies, and in many U.S. states, residents now...

While the use of cookie banners for obtaining user consent is becoming a common method to notify users and meet choice obligations, Red Clover Advisors founder and CEO Jodi Daniels, CIPP/US, writes adding a banner to a website "isn't a quick trip to compliance." Daniels said an effective cookie gove...

The Global Cross-Border Privacy Rules Forum is seeking to connect the dots for the international free flow of data through its own rules framework and its newly released Privacy Recognition for Processors System. Both certification systems involve accountability agents, with the BBB National Program...