Since the early days of data privacy, the principle of purpose limitation has been a core component of practice. It is, after all, one of the original fair information practice principles. As an enforcement hook, however, purpose limitation has generally been too amorphous to lead to meaningful chan...

IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he outlines how the data minimization requirements in Maryland's recently pa...

We know there's a lot of news to sift through these days. To help, we have gathered the top headlines of the week for you. FISA Section 702 renewal bill clears procedural vote in US Senate Biden signs bill reauthorizing FISA Section 702 How the proposed APRA could impact AI Google to delay Pri...

Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados, and the Ministry of Management and Innovation in Public Services Management and Innovation Secretariat presented a process for streamlining data subject access requests. The improvements include simplifying complaint f...

There are more than 70 references to certification, covering privacy by design, data transfers to processors, adequacy of technical and organizational measures, and international data transfers, in the EU General Data Protection Regulation. The European Data Protection Seal is a GDPR-certification ...