5+ day, 19+ hour ago   (157+ words) A look at the evolution of RegTech and how organizations define its role in compliance and risk management. In their 1873 satirical novel, "The Gilded Age," authors Mark Twain and Charles Dudley Warner wrote: "History never repeats itself, but the Kaleidoscopic…...

4+ day, 10+ hour ago   (272+ words) While the Model Context Protocol brings powerful AI integration and accountability through detailed audit trails, it also creates significant privacy and GDPR compliance risks, requiring organizations to build subject-access rights, governance controls and legal safeguards into deployments from the outset....

1+ week, 4+ day ago   (174+ words) Yet, the regulatory framework governing such online consultation services has become increasingly complex. With the EU General Data Protection Regulation and AI Act enforced concurrently in Europe, the compliance obligations under both laws present a formidable challenge that healthcare institutions…...

2+ week, 4+ day ago   (1097+ words) Why healthcare AI governance starts before the contract is signed. The dreaded communication, "Can privacy review this AI contract before we go live on Friday?" For many healthcare privacy professionals, this is becoming a familiar request. The organization has identified…...

2+ week, 5+ day ago   (206+ words) The EU Cyber Resilience Act makes cybersecurity compliance a prerequisite for selling connected products in the EU, requiring security-by-design and conformity assessments. This article is part of a series on the operational impacts of the Cyber Resilience Act. The CRA…...

2+ week, 6+ day ago   (222+ words) Drawing on findings from hundreds of independent consent audits, this session pulls back the curtain on the five most common CMP policy gaps organizations don't know they have, including scripts firing before consent is captured, stale or misconfigured banners, and…...

3+ week, 4+ day ago   (574+ words) Why the smartest AI organizations build compliance in, not bolt it on. The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear a broad spectrum of views in our domains. There's a persistent myth…...

3+ week, 6+ day ago   (53+ words) iapp.org Principal Researcher, Privacy Management Organizations continue to look to their regulatory technology vendor partners to support their compliance journey. However, challenges in selecting, integrating and using selected tooling continue to present challenges. In some cases, organizations are looking…...

3+ week, 6+ day ago   (157+ words) This report analyzes the significance of private litigation and class-action lawsuits in contesting privacy violations in the U.S., tracking the trends and distilling compliance insights. U.S. courts continue to set new, albeit fragmented, precedents with respect to privacy, which are continuing to…...