News
Notes from the IAPP Europe: Flipping the table — interviewing journalists on EU digital matters
1+ day, 22+ hour ago (345+ words) Leading Brussels tech journalists were in the hot seat, answering questions around EU digital sovereignty, child safety online and the AI race. The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear a broad…...
OAIC draft code enhances protections for children
2+ day, 1+ hour ago (463+ words) 2026 is shaping up to be a defining year for privacy and digital responsibility, marked in Australia by the proposed Children's Online Privacy Code and intensifying global momentum around AI governance and enforcement showcased at the IAPP Global Summit 2026. The IAPP…...
When machines judge without knowing: AI, augmentation and the limits of automated cybersecurity decisions
2+ day, 15+ hour ago (871+ words) While AI can augment privacy and cybersecurity work, these authors argue it cannot replicate human judgment or governance. If you feel slightly disoriented by artificial intelligence, you're not alone. The steady stream of headlines " breakthroughs, warnings, existential threats " can feel…...
Amazon-Perplexity dispute raises questions over AI agent liability
2+ day, 21+ hour ago (689+ words) Legal dispute highlights unanswered questions about AI agents' authorization and CFAA liability. This case arrives at a pivotal moment " one underscored by the number of third-party amicus curiae briefs already submitted. As AI agents increasingly act on behalf of humans…...
When health data lives everywhere: Rethinking privacy outside the EHR
4+ day, 2+ hour ago (1033+ words) Health privacy risks now extend far beyond medical records governed by HIPAA. For years, health privacy programs operated on a simple assumption: health data lives in medical records, and the U.S. Health Insurance Portability and Accountability Act tells us how to…...
Caitlyn Tobey receives the IAPP's 100,000 certification
5+ day, 1+ hour ago (343+ words) "Passing the CIPP/C exam was a goal that I set for myself as part of my ongoing professional development," Tobey said. "I wanted to ensure my expertise kept up with Canada's evolving privacy and AI legal landscape." Earning the…...
From shadow IT to demonstrable DPIAs: Building visibility for modern privacy programs
5+ day, 1+ hour ago (1284+ words) A look at creating system-aware, defensible and survivable data protection impact assessments. Privacy practitioners have run data protection impact assessments across enough organizations to see the same pattern: the ideal state looks great, but the inputs arrive so slowly that…...
Trans-Atlantic data flows, the CBPR and AI: A conversation with the International Trade Administration's Bill Guidera
1+ week, 23+ hour ago (82+ words) Trans-Atlantic data flows, the CBPR and AI: A conversation with the International Trade Administration's Bill Guidera'IAPP This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines. Brazil-EU mutual adequacy: What changes for data transfers,…...
A view from DC: As chatbots go mainstream, new laws proliferate
1+ week, 1+ day ago (357+ words) With private rights of action, reporting requirements and design restrictions, the patchwork of chatbot laws is rapidly spreading this year. There are two tidal waves on a collision course in 2026." One is the technological wave of conversational artificial intelligence that…...
Notes from the IAPP Europe: Digital Omnibus package developments, end to voluntary CSAM detection and more
1+ week, 1+ day ago (262+ words) Trilogue negotiations will conclude in the coming months on the Digital Omnibus on AI ahead of the AI Act's August application, while the expiration of the CSAM scanning derogation could create a legal gap. The IAPP is policy neutral. We…...