This article was originally published by IAPP linked here.
California Attorney General Rob Bonta last week announced a USD2.75 million California Consumer Privacy Act settlement, the largest to date, and I think companies should adopt the Snow White and the Seven Dwarfs refrain in response: “Heigh-ho, heigh-ho, it’s off to work we go”
On March 20, 2026, the White House published a four-page document with “Legislative Recommendations” in its National Policy Framework for Artificial Intelligence (the “AI Framework”). The AI Framework does not include specific draft legislation or an executive order, but instead contains recommendations for Congress, setting out the administration’s vision for a comprehensive federal AI legislative
In brief
In early 2026, The Information and Privacy Commissioner of Ontario (IPC) released AI Scribes: Key Considerations for the Health Sector (“Guidance”), a detailed guidance addressing the responsible development, procurement, and use of AI scribe tools. AI scribes are software applications that use speech recognition and natural language processing to capture clinical conversations and
Baker McKenzie partner, Lothar Determann, authored a chapter titled, “What Cybersecurity Laws Govern,” covering the scope, applicability, and enforcement of international cybersecurity laws, with a focus on practical considerations and actionable takeaways for businesses to The ABA Cybersecurity Handbook. This best-selling guide is updated and expanded to address artificial intelligence as it relates to cybersecurity
As quickly as the federal government has deregulated consumer privacy, state regulators and legislators across the United States are doubling down on consumer protection and regulating how businesses use data.
Two key developments in 2026 signal California has prioritized “surveillance pricing”—the use of consumer data to set personalized, individualized prices for goods and services. First,
Last October, the Swiss Federal Council published a preliminary draft of the ‘Federal Act on Communication Platforms and Search Engines’ and opened it for consultation. According to the accompanying explanatory report, the draft is designed to align closely with the European Union’s Digital Services Act (DSA). In the analysis below, we explore the extent of
This article was originally published by IAPP linked here.
To begin your week, I recommend reading IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan’s, CIPP/US, CIPM, insightful article on the U.S. Supreme Court’s decision to grant the petition for certiorari in Salazar v. Paramount Global on the Video Privacy Protection Act.
The quick summary is
I. Introduction
The German Federal Agency for Child and Youth Protection in the Media (Bundeszentrale für Kinder- und Jugendmedienschutz – “BzKJ”), which is also responsible for enforcing the minor protection rules of Art. 28 DSA in Germany, has just published its official quarterly journal, BzKJAktuell, on 27 February 2026. The main focus of this quarter’s
This article was originally published by IAPP linked here.
I would like to first note that the odds that Indiana University would win the College Football Playoff National Championship were +10,000 — 100-to-1. You may know that last week, Indiana University did win the playoff, overcoming a tough Miami University opponent and those incredible
In brief
On February 2, 2026, the Government of Canada published a report, entitled “Engagements on Canada’s Next AI Strategy: Summary of Inputs” (“AI Summary Report“), which analyzes input received for the purposes of developing a renewed artificial intelligence (“AI“) strategy for Canada. The report was generated following a 30-day national sprint in October