Who controls your cloud provider is becoming a procurement question. A draft European regulation would put that question to covered public buyers wherever an activity is identified as contributing to…
Meta's promise to detect users under 13 is conditioned on a limited release from the 51 settling attorneys general. The release does not bind the FTC and does not extend…
The government's motion to unwind the 2019 children's privacy decree argues changed ownership and new compliance systems under Rule 60(b). It never mentions the records that decree required, which is…
The EU's e-Evidence Regulation became fully applicable Aug. 18, putting covered providers on 10-day and eight-hour production clocks backed by penalties of up to 2 percent of total worldwide annual…
In seven days, EU authorities gain the power to order data straight from providers in other member states on 10-day and eight-hour clocks. Most member states' implementing law is incomplete,…
The Supreme Court's Trump v. Slaughter ruling ended the FTC's for-cause removal protections and triggered a same-day demand that Brussels withdraw the EU-U.S. Data Privacy Framework, with a potential Schrems…
The World Economic Forum and Bain & Company published a five-dimension trust framework for sovereign AI workloads hosted abroad, giving governments a shared reference for data residency, access rights, encryption,…
Ofcom, the FTC, and the EU AI Act Omnibus have created an emerging three-jurisdiction synthetic-image compliance stack across 12 days — here is what it changes for cybersecurity, information governance,…
FTC Chairman Andrew N. Ferguson sent compliance letters May 11 to 15 prominent U.S. tech platforms, warning that nonconsensual intimate images left online past the Take It Down Act’s 48-hour…
China’s April 7 supply chain security regulations and the DOJ’s Data Security Program create a dual-jurisdiction compliance vise for cross-border data flows—where restricting data to comply with one sovereign could…
