Opice Blum Advogados' Maria Beatriz Previtali and Tiago Neves Furtado writes the MIT AI Risk Repository acts as a meta-framework that brings order to the fragmented field of AI governance.

IAPP contributor Jersain Llamas Covarrubias offers a practice-oriented overview of Mexico's current cybersecurity framework.

The White House unveiled its AI Action Plan 23 July, setting out its priorities for how it will approach the technology during President Donald Trump's second term.

IAPP Managing Director, Canada, Kris Klein asks readers their thoughts on what the right approach to data sovereignty is for Canada.

The so-called 'Schrems II' case for possible referral to the Court of Justice of the European Union makes for fascinating reading. This unintended attack on the standard contractual clauses mechanism ...

In what the U.S. Federal Trade Commission calls a "first-of-its-kind" enforcement action, the FTCfiled a proposed order against GoodRx, a U.S. health care company, for violating the Health Breach ...

The General Data Protection Regulation regulates cross-border processing of personal data. For many organizations, identifying their lead supervisory authority (LSA), the principal EU regulator ...

Naming the unseen: How the MIT AI Risk Repository helps map the uncertain terrain of AI governance FIPPs organize aspirational principles for responsible data practices by requiring those who collect ...

India's Ministry of Electronics and Information Technology released the draft Digital Personal Data Protection (Act) Rules, 2025 for public consultation until 18 Feb. This marks a significant ...

Background on “adequacy” The EU’s Data Protection Directive 95/46/EC prohibits the transfer of personal data from Europe to a third country, unless that country “ensures an adequate level of ...

In Connecticut and Virginia, the new consumer privacy laws that comprehensively adopt the fair information practice principles, including data security, have left large swaths of data exempt from any ...

On 19 June, the U.K. Information Commissioner's Office published its decision on Snap's My AI. This followed a preliminary enforcement notice issued by the ICO 6 Oct. 2023. The PEN contained ...