The wait for a finalized agreement to solidify EU-U.S. data flows is winding down. The latest step forward in the process came with U.S. President Joe Biden's long-awaited executive order mandating new legal safeguards over U.S. national security agencies' access and use of EU and U.S. personal data. The order comes more than six months after Biden and European Commission President Ursula von der Leyen announced an agreement in principle on the EU-U.S. Data Privacy Framework. Talks for that agr... Read More

The newly released White House executive order implementing the long-awaited EU-U.S. Data Privacy Framework clears a path for trans-Atlantic business and diplomacy alike. Since the Court of Justice of the EU’s “Schrems II” decision invalidated Privacy Shield more than two years ago, personal data flows from the EU to the U.S. have been legally questionable. Some might argue, data transfers were effectively banned. Enforcement actions have only trickled out, but their precedential and deterrent ... Read More

The U.S. Department of Justice announced the Data Access Agreement concerning criminal data sharing between the U.K. and the U.S. entered into force Oct. 3. The two countries will share data under "qualifying, lawful orders for electronic data issued by the other country, without fear of running afoul of restrictions on cross-border disclosures." The DOJ added that the agreement brings "more timely and efficient access to electronic data required in fast-moving investigations through the use of ... Read More

Twitter’s former head of security, Peiter Zatko, revealed his prior employer lagged a decade behind cybersecurity standards. This statement was one among several shocking disclosures he shared with members of the U.S. Senate Judiciary Committee during a hearing Sept. 13. Zatko, who worked at Twitter from November 2020 through January 2022, was called to testify to the committee after he filed a whistleblower complaint with the U.S. Federal Trade Commission and Securities and Exchange Commission... Read More

An appearance by U.S. Federal Trade Commissioner Rebecca Kelly Slaughter at the IAPP Privacy. Security. Risk. 2022 conference was expected to primarily promote reinforcement of the agency's Advance Notice of Proposed Rulemaking on commercial surveillance and lax data security. Attendees were provided a little more than that with Slaughter hinting that the Oct. 21 public comment deadline for the ANPRM may be extended. In conversation with IAPP Vice President and Chief Knowledge Officer Caitlin F... Read More

The U.S. Federal Trade Commission said it would follow the letter of the law when it announced its Advance Notice of Proposed Rulemaking concerning commercial surveillance and lax data security in August, which meant a robust stakeholder consultation to come. That process began in earnest with an exchange of perspectives from relevant parties at the FTC's virtual public forum Sept. 8. The official comment deadline for the ANPRM and the 95 questions it poses will not close until Oct. 21, but the... Read More

The White House Office of Science and Technology Policy published "Blueprint for an AI Bill of Rights," which provides design, development and deployment guidelines for artificial intelligence technologies. Data privacy, algorithmic discrimination protections and user choice principles are among the OTSP's "five common sense protections to which everyone in America should be entitled." The OTSP said the blueprint is "a vision for a society" and its AI use focuses on protections from the onset, i... Read More