The EU Artificial Intelligence Act was carefully crafted with a risk-based approach to regulating AI — heavily regulating high-risk AI models, lightly regulating generative AI models with systemic risk and leaving low-risk models alone. Not all purchasers of AI functionality have adopted this risk-...

Andrew Burt watched clients increasingly look to bring artificial intelligence into their companies. But they kept running into the same barrier: A struggle to manage the risks and align the AI's use with their company's activities. So he decided to take what Luminos.Law, the boutique law firm he c...

While the use of cookie banners for obtaining user consent is becoming a common method to notify users and meet choice obligations, Red Clover Advisors founder and CEO Jodi Daniels, CIPP/US, writes adding a banner to a website "isn't a quick trip to compliance." Daniels said an effective cookie gove...

The Netherlands' data protection authority, Autoriteit Persoonsgegevens, issued guidance detailing why scraping data from websites is illegal under the EU General Data Protection Regulation in most contexts. The AP claimed there is a general misunderstanding that the practice is legal if it scrapes ...

The California Privacy Protection Agency published its agenda for its 10 May public board meeting. Key discussion items include potential updates on the agency's data broker registration regulations and a nonpublic session to discuss the agency's litigation with the California Chamber of Commerce. F...