Some old, some new requirements in NH and NJ laws

Two new US state laws have been approved for New Jersey and New Hampshire already this year. As part of our commitment to keeping up with the latest law requirements, we have pulled out a few takeaways. Quick Overviews The essence of the New Jersey and New Hampshire privacy laws, otherwise referr...

AI Criteria: Review

The most important piece of any privacy program handling or investigating the use of artificial intelligence is the review process. There are three areas to review, including the algorithm itself, the training data, and finally the outputs. This will act like a filter of increasing scrutiny as we...

Balancing user convenience and consent in system updates

Over Thanksgiving, a Facebook post from a local community police department caught my attention, warning about an automatic feature called NameDrop in the Apple iOS17 update. Once I returned to work, I decided to delve into the issue surrounding this automatic feature. It also reminded me that th...

AI criteria: Notice and Choice

Providing a privacy notice to individuals about  how their data is collected and processed is not a foreign concept to privacy professionals. We need to detail what information is collected, how it is used and shared, what rights subjects have, and provide them some way to ask questions or m...

AI criteria: Non-invasiveness

Privacy is often considering whether or not a use of information is appropriate. What is or isn’t appropriate is based on regulations and rules, but as I had written elsewhere, your own feelings might play into that as well (Empathic Privacy). Being non-invasive is a matter of considering if the ...

Privacy Training Is (Still) Vitally Important

Several years ago, I wrote a pamphlet for the International Association of Privacy Professionals titled Six Ways Privacy Awareness Training Will Transform Your Staff . The impacts identified in that paper continue to ring true as evidenced by them being described in the current iteration of ...

AI Criteria: Proportionality

Where necessity is all about whether AI-based processing would be possible, proportionality is all about the acceptability of the processing. Proportionality can also refer to the amount of information collected, as processing too much information can be directly disproportionate to the task at h...

AI criteria: Measuring Necessity

In May I presented a privacy focused look into artificial intelligence. I went over 7 criteria to review prior to implementing any use of AI. The first of these was necessity, whether aspects of the proposed use of AI is needed or not. As part of a series of blogs, I will go over what […]

The terrible, horrible, no good, very bad phishing email

I recently received an email that I knew was a fishing email after five seconds of inspection.  It wasn’t anything flashy that gave it away, just a slew of telltale signs that it wasn’t an authentic message, but some malicious correspondence meant to take advantage of a less informed individ...

AI voice scams

How to respond to AI voice scams I read a post on Facebook this morning warning me of the risk of my voice being collected for an AI voice scam. The post said that a woman answered a call from an unknown number, and the person on the other end seemed to intentionally be asking […]