As privacy professionals, our foundational principles should always serve as our North Star. Principles like transparency, autonomy and choice guide us in our practice, even when other markers fail to point the way. If the principles are Polaris, the policies and procedures we deploy to properly sa...

Nigeria's Data Protection Commission issued a highly-anticipated guidance notice 14 Feb. on the "Registration of Data Controllers and Data Processors of Major Importance." Enacted 12 June 2023, Section 65 of Nigeria's Data Protection Act introduced data controllers and data processors of major impo...

IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offers his take on the latest privacy and artificial intelligence governance developments in the nation's capital and around the U.S. This week, he analyzes the U.S. Federal Communications Commission's privacy authority a...

The IAPP Research and Insights Team analyzed the major data privacy and cybersecurity enforcement actions taken by the U.S. Federal Trade Commission since 2018. In that time period, the FTC issued 67 orders in eight main categories. IAPP Westin Research Fellow Andrew Folks, CIPP/US, and WilmerHale A...

The lack of clarity of what constituted a data controller or processor of "major importance" under Nigeria's Data Protection Act led to a complicated introduction to compliance when its regulations entered into force. Alliance Law Firm Lawyer Anastasia Edward and The Center for AI and Digital Policy...