News
OPC's Dufresne touts new age assurance guides, teases AI enforcement updates
4+ hour, 5+ min ago (550+ words) At the IAPP Canada Symposium 2026, Privacy Commissioner of Canada Philippe Dufresne unveiled age assurance guidelines while teasing upcoming results of AI enforcement work. Privacy Commissioner of Canada Philippe Dufresne marked the start of the nation's Privacy Awareness Week by announcing…...
Stewart Baker, outspoken voice on cybersecurity and national security law, dies at 78
9+ hour, 50+ min ago (1040+ words) Baker's long-running and influential career as lawyer, NSA general counsel and senior DHS official, spanned the '90s-era 'crypto wars,' the creation of the post-9/11 surveillance and info-sharing apparatus, the Snowden era metadata debates and beyond. Stewart Baker, a former general…...
Cal Privacy explores data broker enforcement uptick, EU adequacy prospects
17+ hour, 16+ min ago (817+ words) The agency's 1 May board meeting unpacked Cal Privacy's data broker enforcement priorities, opposition to U. S. Congress' new privacy bill and the hurdles to EU-California adequacy. The California Privacy Protection Agency's latest board meeting underscored the wide-ranging nature of its current focus…...
Thought for the week: Cyber risk moves at AI speed
6+ hour, 7+ min ago (187+ words) AI is finding and exploiting software bugs almost instantly, causing companies to rethink patching, response plans and vendor risk. The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear a broad spectrum of views…...
ANPD'S 2026 reorganization: What it means for privacy and data protection in Brazil
13+ hour, 45+ min ago (268+ words) The agency's evolution reflects a shift toward deeper enforcement and heightened operational privacy demands for organizations in Brazil. Brazil's data protection landscape is entering a new phase. With the publication of Resolution No. 33, the Ag'ncia Nacional de Prote'o de Dados…...
HIPAA's Security Rule meets quantum risk: A renovation that needs one more fix
3+ day, 9+ hour ago (226+ words) Proposed changes to the HIPAA Security Rule mark the biggest update to healthcare data security in a decade, but while the rule acknowledges emerging quantum risks, it stops short of fully addressing them. Discussions around quantum computing often swing between…...
Notes from the Asia-Pacific region: Cyber risk is outpacing organizational response
2+ week, 6+ day ago (342+ words) The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear a broad spectrum of views in our domains." In his March address to the National Cyber Security Summit 2026, New Zealand Privacy Commissioner Michael Webster…...
EU AI Act reform talks stall as key compliance deadline looms
5+ day, 5+ hour ago (381+ words) Trilogue negotiations for reforming the EU AI Act under the Digital Omnibus for AI were delayed after the Parliament and Council disagreed on the act's overlap with sectoral regulations. Talks will resume next month ahead of a looming compliance deadline…...
Building the foundation: Records retention before AI
6+ day, 8+ hour ago (171+ words) What you will learn: " Establish retention as a prerequisite to AI readiness " define what data you keep, why, and for how long before scaling AI initiatives. " Keep data purposeful to increase value " remove unnecessary or outdated data to improve quality…...
New obstacles for health care: Federal and state national security regulations increasingly target health data
1+ week, 3+ day ago (1001+ words) Health and life sciences companies are navigating largely unaligned compliance obligations meant to keep U. S. health and genomic data out of foreign adversaries' reach. Over the past three years, federal and state regulations designed to prevent foreign adversary nations from accessing,…...