Tech Companies Hit with Hefty Penalties for Privacy Violations

Technology companies are increasingly being forced to pay fines and settlements due to violations of privacy and data protection laws. TikTok was recently issued a €530 million fine by the Irish Data Protection Commission (DPC), and Google settled a lawsuit in Texas, agreeing to pay a penalty of more than $1.3 billion.

Following an investigation into the Chinese social media ...

U.S. Copyright Office Questions Fair Use in Generative AI Training

The U.S. Copyright Office (USCO) has released a pre-publication version of Part 3 of its Copyright and Artificial Intelligence (AI) report, addressing copyright issues arising from using copyrighted materials to train generative AI.

According to the report, a case-by-case analysis is required to determine whether training AI using copyrighted content constitutes infringement or is permitted under the fair use defense. ...

First U.S. Federal Law Requiring Removal of Deepfakes

The U.S. Federal Take It Down Act, designed to combat the “revenge porn” phenomenon, was approved in Congress and signed into law. The law applies to deepfake-created pornographic content, making it the first federal law to explicitly address deepfake risks posed by AI.

Deepfakes are AI-generated images, videos, or voice recordings that can depict people doing acts they never did ...

The European Union Seeks to Ease the Burden of Privacy Regulation

The General Data Protection Regulation (GDPR), which attracted a reputation for its rigid protection of individual data rights, may soon change. The European Commission recently announced that it has finalized a plan to simplify the GDPR’s regulatory requirements, particularly those affecting small and medium businesses.

Since coming into effect in 2018, the GDPR has been subject to debate, criticism, and ...

Israel: New Draft Guidelines on the Application of Privacy Law to AI

The Israeli Privacy Protection Authority published draft guidance regarding the “Application of the Privacy Protection Law to Artificial Intelligence Systems”, for public consultation. The draft explains how the Israeli regulator intends to interpret and enforce privacy laws as applied to Artificial Intelligence (AI), emphasizing that the law applies throughout all stages of AI development and deployment, including information generated by ...

California Privacy Agency Proposes New Data Privacy and AI Rules

The California Privacy Protection Agency (CPPA) recently issued draft regulations regarding data deletion requirements for data brokers and cybersecurity audit requirements for companies engaged in processing activities that pose an elevated cybersecurity risk.

The proposed regulations on an Accessible Delete Mechanism seek to establish a Delete Request and Opt-out Platform (DROP) to allow consumers to file a single request that their ...

Israeli Privacy Regulator Issues Draft Guidelines on Privacy in AI

Israel’s Privacy Protection Authority (PPA) has released draft guidance on the application of the Privacy Protection Law to artificial intelligence (AI) applications. The draft primarily clarifies how privacy law applies throughout the development and use of AI systems, as well as to the data they generate.

The draft sets out several key compliance expectations. It requires organizations to disclose to ...

FTC Issues New COPPA Rule

The U.S. Federal Trade Commission (FTC) has adopted final amendments to the Children’s Online Privacy Protection Rule (COPPA Rule). These amendments aim to strengthen the protection of personal information collected from children, respond to changes in technology and online practices, and clarify and streamline the COPPA Rule since its last amendment in 2013. The amendments are based on the FTC’s ...