Privacy Law Matters Blog

By Alex Schlight & Jevan Hutson 2023 marked a significant shift in AI technology and ushered in a flood of laws and standards to help regulate it. In this article, we recap the major AI events of 2023, explore what may come in 2024, and provide some practical tips for responding to the challenges and…

By Sam Castic This past year has been a busy year for privacy leaders and professionals, and the pace of change underscores that reactive approaches to new laws, regulations, and enforcement actions are not effective ways to build or scale privacy programs.  Laws and risks will continue to evolve, and strategically planning and evolving existing…

Hintze Law continuously tracks privacy and security updates around the world to bring you a regular update of the latest developments. Below is a snapshot of updates from the last month. If you missed our last round of updates, you can find those here.  United States: State Law Updates AI Legislation Proposed in Washington StateOn December…

By Charlotte Lunday Last month, we wrote about draft regulations the California Privacy Protection Agency (“CPPA”) is considering around automated decisionmaking technologies (“ADMT”) and requirements for risk assessments of those technologies. On December 8, 2023, the CPPA met to discuss these and other proposals they are considering for formal rulemaking in 2024. The December 8th…

By Amy Lanchester and Sam Castic Over the past decade, financial technology companies have transformed how consumers think about banking and financial services with user-centric technologies and practices. The innovative products and services they offer are facing increased scrutiny from state and federal regulators.In 2024, fintechs should be prepared to navigate the following five data…

By Charlotte Lunday On November 27, 2023, the California Privacy Protection Agency (“CPPA”) issued a discussion draft of regulations on automated decisionmaking technology (“Discussion Draft on ADT”) and amended regulations on risk assessments (“Discussion Draft on Risk Assessments”) (collectively, “the Discussion Drafts”). The Discussion Drafts include requirements related to (1) notice, (2) opt-outs, and (3)…

Hintze Law continuously tracks privacy and security updates around the world to bring you a regular update of the latest developments. Below is a snapshot of updates from the last month. If you missed our last round of updates, you can find those here.  United States: State Law Updates California Privacy Protection Agency Board Meeting The California…

By Cameron CantrellOn Wednesday, November 15, 2023, the European Data Protection Board (“EDPB”) announced new draft guidance titled “Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive” (the “Guidelines”), which the EDPB says “aims to clarify which technical operations, in particular new and emerging tracking techniques, are covered by the Directive, and to…

By Jennifer Ruehr and Sam Castic If you weren’t able to attend the IAPP’s inaugural AI Governance Global Conference in Boston last week, we have you covered. We attended and summarized below several key themes from the event. AI Governance Programs Have Some Key Elements. AI governance programs at many companies consist primarily of some or all…

By Zachary DouglasHere is a snapshot of some privacy developments from the last month. If you missed our last post, you can find it here. US STATE LAW California Legal Protections for Abortion, Contraception and Gender-Affirming Care Providers   On September 27, 2023, Senate Bill 345 relating to the provision of abortion, contraception, and gender-affirming healthcare services was signed…