5+ day, 7+ hour ago   (157+ words) A look at the evolution of RegTech and how organizations define its role in compliance and risk management. In their 1873 satirical novel, "The Gilded Age," authors Mark Twain and Charles Dudley Warner wrote: "History never repeats itself, but the Kaleidoscopic…...

3+ day, 23+ hour ago   (272+ words) While the Model Context Protocol brings powerful AI integration and accountability through detailed audit trails, it also creates significant privacy and GDPR compliance risks, requiring organizations to build subject-access rights, governance controls and legal safeguards into deployments from the outset....

1+ week, 3+ day ago   (174+ words) Yet, the regulatory framework governing such online consultation services has become increasingly complex. With the EU General Data Protection Regulation and AI Act enforced concurrently in Europe, the compliance obligations under both laws present a formidable challenge that healthcare institutions…...

1+ week, 3+ day ago   (620+ words) Enterprise AI is pushing CISOs into a broader privacy role, requiring security leaders to help turn privacy principles into enforceable controls across AI governance, vendor oversight and incident response. The IAPP is policy neutral. We publish contributed opinion pieces to…...

1+ week, 5+ day ago   (133+ words) The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear a broad spectrum of views in our domains. This article is part of an ongoing series that will explore issues or recent developments in…...

2+ week, 4+ day ago   (293+ words) While current U.S. state privacy laws give consumers certain rights over personal data and AI-driven decision-making, they generally do not provide a broad right to opt out of AI training. A few things are happening at once. Virtually every company is…...

2+ week, 5+ day ago   (206+ words) The EU Cyber Resilience Act makes cybersecurity compliance a prerequisite for selling connected products in the EU, requiring security-by-design and conformity assessments. This article is part of a series on the operational impacts of the Cyber Resilience Act. The CRA…...

2+ week, 5+ day ago   (121+ words) This series will cover the CRA’s application to products, best practices for reporting vulnerabilities, conducting conformity assessments, managing compliance across other major regulations and more. As organizations prepare for the CRA's requirements to become fully applicable by December 2027, the IAPP…...

3+ week, 2+ day ago   (264+ words) The European Commission consultation on safeguarding EU data sovereignty seeks feedback on challenges EU organizations face when accessing, transferring and protecting data across borders. The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear…...

3+ week, 2+ day ago   (61+ words) IAPP Vice President and Chief Knowledge Officer CIPP/E, CIPM, CIPT, CDPO/BR, FIP Country Leader, Brazil, IAPP; Managing Partner In this LinkedIn Live, the IAPP's Caitlin Fennessy was joined by Opice Blum's Henrique Fabretti Moraes as they discussed Brazil's…...