On August 31, 2026, the European Commission announced that it had designated ChatGPT as a Very Large Online Search Engine (“VLOSE”) and Reddit and Roblox as Very Large Online Platforms (“VLOPs”) under the Digital Services Act (“DSA”).Continue Reading ›
Privacy & Data Security
Webinar | The AI You Didn’t Build: From Black Box to Defensible Risk
IAPP will host the webinar “The AI You Didn’t Build: From Black Box to Defensible Risk” on Sept. 24 from 8 to 9 a.m. PT. The program will focus on the risks associated with artificial intelligence embedded in third-party software and provide a practical framework for identifying AI within vendor products, assessing and scoring third-party…
Federal Court Rules Government’s Anthropic Supply Chain Designation Was Unlawful Retaliation: What Government Contractors Need to Know
This is the third installment in our coverage of the Anthropic/Department of War dispute. Our first alert addressed the Trump administration’s February 27 directives barring federal contractors from using Anthropic and its Claude platform, including Secretary Hegseth’s designation of Anthropic as a supply chain risk to national security and the resulting requirement that all DoW…
Sept. 9 EVENT | ACC Foundation 2026 Virtual Learning Lab – Cybersecurity 201
Pennsylvania AG’s Lawsuit Against Snap Highlights Growing Risks for Companies with Child and Teen Audiences
New lawsuit by the PA Attorney General against Snap (fka Snapchat) provides some potential lessons to companies that have child or teen audiences for their services.
1. Mind your Marketing:
Regulators pay special attention to the content of marketing of the companies as evidence of knowledge or intent as well as evidence of audience-design. If…
Maintaining Human Intelligence in an AI World
@media screen and (max-width: 1023px){section[data-id=”block_5878917d5a6bc7cba9b8e637027a0d05″]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_5878917d5a6bc7cba9b8e637027a0d05″]{ }}@media screen and (min-width: 1366px){section[data-id=”block_5878917d5a6bc7cba9b8e637027a0d05″]{ }}

Elise Houlik is the Chief Privacy Officer at Intuit, where she leads the company’s global privacy and responsible data innovation and protection strategy, ensuring data is used to safely power innovation across Intuit’s ecosystem of financial
…
Kids, Teens, and the Privacy Patchwork: What Organizations Need to Know and Do
As privacy professionals, we’ve watched US state privacy expand to an extraordinary 23 comprehensive privacy laws across the country. But what a lot of companies haven’t necessarily clocked yet is that there’s an entire patchwork of laws sitting underneath that number, built just for kids and teens. It’s not always visible from the outside either,…
[Ask this] at your next privacy meeting
Who Owns This? The Privacy Question Most Companies Can’t Answer
My husband and I have been running a household together for years, and we still have to stop and check in regularly on who’s doing what. There are a million small things happening at once, and without checking in, we end up either both handling…
FTC Puts Personalized Pricing on Notice: What Retailers Should Know About the Agency’s Proposed Enforcement Policy
For years, retailers have used data to understand what consumers want, when they want it, and how much they may be willing to pay. As artificial intelligence and increasingly sophisticated pricing tools make it possible to tailor prices at the individual level, the Federal Trade Commission (FTC) is signaling that the line between legitimate pricing…
A Federal Shift in AI and the Right of Publicity? NO FAKES Act Advances in Congress
Key point: The rapid advancement of generative artificial intelligence (AI) facilitates the creation of highly realistic digital replicas of an individual’s image, voice, or other likeness, fueling disputes over unauthorized deepfakes, synthetic voices, and AI-generated impersonations that federal legislation might address.…
