Since the early days of data privacy, the principle of purpose limitation has been a core component of practice. It is, after all, one of the original fair information practice principles. As an enforcement hook, however, purpose limitation has generally been too amorphous to lead to meaningful chan...

IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he outlines how the data minimization requirements in Maryland's recently pa...

The Wall Street Journal detailed the complex process health care insurance provider UnitedHealth Group will have to undergo to restore its systems after an extensive data breach at Change Healthcare. Due to the amount of sensitive data stolen during the cyberattack, it could take UnitedHealth months...

From another delay to the European Agency for Cybersecurity's European Cybersecurity Certification Scheme for Cloud Services, to the European Data Protection Board's strategy for 2024-2027, Parliament's adoption of the European Health Data Space, and ramped up enforcement of the Digital Services Act...

Civil rights advocacy group Campaign for Accountability sent letters to five U.S. state attorneys general seeking an investigation into crisis pregnancy centers' collection of sensitive medical information, NBC News reports. The group claimed reproductive health centers are gathering personal medica...