In a brief video, Equifax Chairman and CEO Rick Smith announced the news and the steps the company is taking in its breach response, saying the company "acted immediately to stop the intrusion" and ...

Mayer Brown's Arsen Kourinian details laws in California and New York that may require vehicle manufacturers to provide domestic abuse survivors and drivers the right to terminate an abuser's access ...

The U.S. state of Iowa is no stranger to privacy bills. Since its first attempt in 2020, the state's legislature has repeatedly proposed and considered comprehensive consumer data privacy legislation.

Despite that, a lot has been said about similarities between the GDPR and CCPA and still more about significant differences. Understanding third parties and related requirements is where practical ...

And so, yet again, a new legal theory is beginning to take root to blunt the impact of state privacy regulation. Specifically, some are suggesting the CPRA’s amendment of the CCPA provides, except for ...

Most importantly, for the current uses of and innovations in AI, model cards provide details about the construction of the machine learning model, like its architecture and training data. Seeing what ...

While only a few jurisdictions have passed laws specific to artificial intelligence governance, the regulatory application of existing laws to the governance of AI technologies has happened at a much ...

This post analyzes CPRA's categories of sensitive personal data, company obligations, whether CPRA is a good model for regulating sensitive personal data.

A key concern in today's digital era is the amplified risk of unauthorized reidentification brought on by artificial intelligence, specifically by the large and diverse data sets used to train ...

How does the service-provider exception play out in practice? Website-hosting provider A website-hosting provider would be a logical vendor to consider as a service provider, depending on the ...

The scope of the CPA is reminiscent of the CDPA and CCPA but includes a few notable differences. The CPA applies to any controller that: “Conducts business in Colorado or produces or delivers ...

Keir Lamont and David Stauss take a look at state data privacy law activity over 2024, noting seven new states passed comprehensive privacy laws.