The UK Just Quietly Flipped the Switch on Automated Decisions
There’s a question doing the rounds in data protection circles: do the UK’s new automated decision-making rules actually change anything?…
There’s a question doing the rounds in data protection circles: do the UK’s new automated decision-making rules actually change anything?…
The UK’s Data (Use and Access) Act 2025 (DUAA) comes into force on 5 February 2026. Before you worry about…
Using AI tools for meeting notes and transcription? Find out whether you need a new lawful basis under UK GDPR…
The Information Commissioner’s Office has announced formal investigations into X Internet Unlimited Company (XIUC) and X.AI LLC over concerns that…
The Indiana Consumer Data Protection Act took effect on January 1 2026. The Indiana Attorney General has signaled an intention…
The Rhode Island Data Transparency and Privacy Protection Act took effect on January 1 2026. The law is notable for…
The Kentucky Consumer Data Protection Act takes effect on January 1 2026. As of this writing, the law is not…
The Minnesota Consumer Data Privacy Act took effect on July 1 2025. The law includes unique requirements like the right…
The Maryland Online Data Privacy Act took effect on October 1 2025, though it does not apply to processing activities…
The Austrian data protection authority has ruled that Microsoft illegally installed tracking cookies on a student’s device through its 365…
If you thought US privacy enforcement was winding down, think again. Despite predictions that changes in Washington would put the…
The Nebraska Data Privacy Act took effect on January 1 2025. The law’s broad applicability, due to its lack of…
The New Hampshire Privacy Act took effect on January 1 2025, with universal opt-out mechanism requirements active from day one.…
The New Jersey Data Protection Act took effect on January 15 2025. The law covers New Jersey’s nearly 9 million…
The Delaware Personal Data Privacy Act took effect on January 1 2025. With the 60-day cure period expiring at the…
The Tennessee Information Protection Act took effect on July 1 2025, making it one of the newest US state privacy…
The Iowa Consumer Data Protection Act took effect on January 1 2025. The law includes the longest cure period of…
The Utah Consumer Privacy Act took effect on December 31 2023, making it one of the earlier US state privacy…
The Montana Consumer Data Privacy Act took effect on October 1 2024, making it one of the newer US state…
The Oregon Consumer Privacy Act took effect on July 1 2024 for for-profit businesses. In its first year, the Oregon…