As AI agents act more independently, organizations need clear, privacy-friendly records of what they do and why.

Whether AI hallucinations count as personal data under the GDPR depends on whether they appear fictional or factual.

Recent developments in mainland China and Hong Kong signal a growing focus on enabling AI and data use while strengthening ...

OpenAI has strengthened its security protocols as it looks to restore Australian officials and consumers' confidence ...

Although full regulatory convergence remains a work in progress in Europe, the EU's predictability, policy coherence and ...

AI agents introduce new cyber risk, liability and governance questions that organizations should consider carefully.

Ten years after the GDPR's adoption, privacy professionals continue to debate fundamental questions about its interpretation.

At the IAPP P.S.R + AIGG 2026, Washington Attorney General Nick Brown discussed the state's shortcomings on comprehensive ...

The paper trail for CCPA audits begins, for some, 1 Jan. 2027. Coming soon: more independent assessment and AI assurance ...

Cybersecurity implicates many aspects of corporate and governmental operations, engaging senior management, boards of directors, corporate counsel, outside counsel and policymakers at all levels of ...

The U.S. House Committee on Energy and Commerce adopted multiple children's online safety bills during a 5 March markup session that will receive a full House vote. The KIDS Act contains some, but not ...

The IAPP is policy neutral. We publish contributed opinion pieces to enable our members to hear a broad spectrum of views in our domains. In a recent policy debate and workshop, a learned contributor ...