A Bavarian court held that a store’s private security guard lawfully used a body-worn camera under Article 6(1)(f) GDPR to protect property, maintain order, and ensure staff safety, in a decision that provides actionable insights for U.S.-based retailers as well.
The court blessed the recording because the store took a number of privacy-protective measures:
The European Data Protection Supervisor (EDPS) recently issued a TechDispatch on Automated Decision Making.
Here is what you need to know:
Part 1: 12 Myths About Automated Decision-Making (ADM) Systems
If artificial intelligence results in employment discrimination, employer needs to realize it is still discrimination.
But a bias audit can help.
California’s Civil Rights Counsel recently issued the Final Text of Proposed Employment Regulations Regarding Automated-Decision Systems. It goes into effect on October 1, 2025.
Some key takeaways:
If you use a bot powered by artificial intelligence to interact with consumers, you need to disclose it.
A new law in Maine that goes into effect in September 2025 requires businesses to notify consumers in a clear and conspicuous manner that they are not engaging with a human being.
Not doing so may be
America’s AI Action Plan is out, and it has three pillars: innovation, infrastructure, and international diplomacy and security.
This is different from the (now rescinded) AI Blueprint Executive Order issued by President Joe Biden. It lays out specific action items for the many federal agencies that are meant to effectuate each pillar.
Of note to
The Attorney Generals of California, Connecticut, Delaware, New Jersey, Oregon and Vermont wrote a letter June 23, 2025 to Senate Majority Leader John Thune and Senate Minority Leader Chuck Schumer, objecting to a proposed AI enforcement moratorium that is in the One Big Beautiful Bill.
The key arguments against the ban are:
Following the Federal Trade Commission’s decision in December 2023 to ban Rite Aid from using AI facial recognition, it has become crystal clear that U.S. regulators expect a risk assessment when a retailer uses facial recognition technology.A new, and detailed, report from the New Zealand privacy commission provides helpful considerations for such Data Protection
The National Security Agency’s Artificial Intelligence, Security Center (AISC), together with the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), the New Zealand’s Government Communications Security Bureau’s National Cyber Security Centre (NCSC-NZ), and the United Kingdom’s National Cyber Security Centre (NCSC-UK),
Just as the European Union is reassessing the EU AI Act, Colorado is considering a bill to narrow the scope of the Colorado AI Act before it even takes effect.
Here are some points regarding SB 318 in Colorado:
Is the EU AI Act a Jenga piece that can easily be removed from the regulatory tower?
Here are some key points from the “AI Regulation – a critical comment” workshop at the Alpine Privacy Days Conference, courtesy of Florent Thouvenin, Professor of Information and Communications Law, The Faculty of Law of the University of