On July 26, 2024, the National Institute for Standards and Technology (“NIST”), part of the Department of Commerce, released guidelines, a global engagement plan, and software covering various aspects of AI technology pursuant to Biden’s Executive Order on AI.
Privacy & Data Security
Substantial New CCPA Regulations Inch Closer to Reality: A Detailed Overview of the New Requirements and Their Projected $4 Billion Cost to California Businesses
On July 16, 2024, the California Privacy Protection Agency (CPPA) Board met to discuss advancing its over 200-page draft rulemaking package to formal proceedings.[1] The proposed regulations include 37 pages of significant new obligations spanning cybersecurity audits, automated decision-making technology (e.g., artificial intelligence, (AI)), privacy risk assessments, and 72 pages of other updates to…
Malaysia Pushes Out Groundbreaking Amendment to Personal Data Protection Act – Impact on Businesses
Malaysia’s Personal Data Protection Act (PDPA) was enacted in 2010 and came into force in November 2013, making Malaysia the first country in the Association of Southeast Asian Nations (ASEAN) to enact comprehensive privacy legislation.
On July 31, 2024, the Personal Data Protection (Amendment) Bill 2024 (PDP Bill) was passed by the Dewan Negara (Malaysia’s…
Malaysia Pushes Out Groundbreaking Amendment to Personal Data Protection Act – Impact on Businesses
Malaysia’s Personal Data Protection Act (PDPA) was enacted in 2010 and came into force in November 2013, making Malaysia the first country in the Association of Southeast Asian Nations (ASEAN) to enact comprehensive privacy legislation.
On July 31, 2024, the Personal Data Protection (Amendment) Bill 2024 (PDP Bill) was passed by the Dewan Negara (Malaysia’s…
The Top 10 Privacy Law Issues From Last Month
These are the top 10 things you need to know from the world of privacy last month, as compiled by me.
- Texas means business when it comes to biometrics. The Texas Attorney General recently secured a $1.4 billion settlement from Meta stemming from the state’s “Capture or Use of Biometric Identifier” Act (CUBI). If you
…
From Data Collection to Consumer Trust: How Retailers Adapt to Evolving Privacy and Security Laws
@media screen and (max-width: 1023px){section[data-id=”block_f9ad4e62b148f8dbcb6af2933e7217e8″]{ }}@media screen and (min-width: 1024px) and (max-width: 1365px){section[data-id=”block_f9ad4e62b148f8dbcb6af2933e7217e8″]{ }}@media screen and (min-width: 1366px){section[data-id=”block_f9ad4e62b148f8dbcb6af2933e7217e8″]{ }}

Alexandria (Lexi) Lutz is the Senior Corporate Counsel at Nordstrom, where she advises the company on legal matters related to privacy, cybersecurity, and AI. Prior to Nordstrom, Lexi worked for a large national hotel brand and
…
The EU Commission’s Draft AI Pact anticipating compliance with newly published AI Act
Shortly after the publication of the Artificial Intelligence (AI) Act, the EU Commission published the AI Pact’s draft commitments with a view of anticipating compliance with high-risk requirements for AI developers and deployers.
Publication and timeline for the AI Act
The EU AI Act was published in the Official Journal of the European Union on…
A Comparison of AI Regulatory Frameworks
…
The EU AI Act – What Businesses Need to Know
Special thanks to Taft summer associate Tanner Wilburn for his significant contributions to this post.
On July 12, 2024, the European Union’s Artificial Intelligence Act (AI Act) was published in the EU Official Journal.

This comprehensive legislation establishes the first risk-based regulatory framework for AI systems, with far-reaching implications for businesses using AI. The AI…
UK, EU, and US release joint statement on competition in generative AI foundation models and AI products
On July 23, the European Commission, US Department of Justice, US Federal Trade Commission, and UK Competition and Markets Authority released a joint statement setting out shared principles on competition in markets that deploy generative AI foundation models and other AI products.