Two new US state laws have been approved for New Jersey and New Hampshire already this year. As part of our commitment to keeping up with the latest law requirements, we have pulled out a few takeaways. Quick Overviews The essence of the New Jersey and New Hampshire privacy laws, otherwise referred to as SB […]
Some old, some new requirements in NH and NJ laws Read More »
With the introduction of new privacy laws, I frequently am asked “what do I need to do?” by business owners. Recently, the question is coming from SMB owners who are unclear if the emerging privacy laws apply to them. Looking at the laws For this discussion, let’s categorize the laws into those that apply to
Privacy and the SMBs Read More »
During a webinar in May of 2023, I stated that the main problem with artificial intelligence isn’t AI itself, but the people who use it. I still hold to this idea. Most applications I have seen that make me scratch my head or cringe with disbelief are bad ideas from people, not mistakes or errors
AI Criteria: Access Read More »
The most important piece of any privacy program handling or investigating the use of artificial intelligence is the review process. There are three areas to review, including the algorithm itself, the training data, and finally the outputs. This will act like a filter of increasing scrutiny as we progress. The Algorithm We have a few
AI Criteria: Review Read More »
Over Thanksgiving, a Facebook post from a local community police department caught my attention, warning about an automatic feature called NameDrop in the Apple iOS17 update. Once I returned to work, I decided to delve into the issue surrounding this automatic feature. It also reminded me that this is not the first time I have
Balancing user convenience and consent in system updates Read More »
Providing a privacy notice to individuals about how their data is collected and processed is not a foreign concept to privacy professionals. We need to detail what information is collected, how it is used and shared, what rights subjects have, and provide them some way to ask questions or make comments and provide feedback to
AI criteria: Notice and Choice Read More »
Privacy is often considering whether or not a use of information is appropriate. What is or isn’t appropriate is based on regulations and rules, but as I had written elsewhere, your own feelings might play into that as well (Empathic Privacy). Being non-invasive is a matter of considering if the processing of data, in this
AI criteria: Non-invasiveness Read More »
An increasing number of class action lawsuits are being raised alleging violations of the Video Privacy Protection Act, or VPPA, sharing a common thread which is the use of the Meta pixel on videos. Volume up on Video Privacy Protection Act litigation If the class action lawsuits are ringing alarm bells in your organization regarding
Is the use of the Meta pixel a VPPA violation? Read More »
Several years ago, I wrote a pamphlet for the International Association of Privacy Professionals titled Six Ways Privacy Awareness Training Will Transform Your Staff . The impacts identified in that paper continue to ring true as evidenced by them being described in the current iteration of the IAPP’s Privacy Program Management course. These impacts include: It
Privacy Training Is (Still) Vitally Important Read More »
Where necessity is all about whether AI-based processing would be possible, proportionality is all about the acceptability of the processing. Proportionality can also refer to the amount of information collected, as processing too much information can be directly disproportionate to the task at hand. However, the focus for me is whether the average person would
AI Criteria: Proportionality Read More »
