Travis LeBlanc

for your use

28

Up next at the Justice and Public Safety AI Summit, attendees hear from Michael Navin from the National Center for State Courts and Joyce Roldan King from Frederick County (MD) State’s Attorney’s Office. These two joined forces to discuss their understanding of how #AI is and could be used in courts and prosecution, while also discussing their concerns. #AIinPublicSafety #AIinLawEnforcement #AIinCorrections #AIinEmergencyCommunications #CRMP

14

Earlier today, the California Privacy Protection Agency Board voted to advance the new draft CCPA regulations to formal rulemaking. We thought it might be helpful to provide a series of short high-level summary webinars on the new rulemaking topics, starting with automated decisionmaking technology (ADMT). If you missed the Board meeting, the draft ADMT rules were a source of many comments and concerns, including their impact on artificial intelligence. There can be no doubt that the ADMT regulations will generate many proposed revisions. https://lnkd.in/guW-BJPc

133

2 Comments

Join us in our Boston office on October 30 for an in-depth program focused on modern cybersecurity, covering the current cyber threat landscape, advanced risk management techniques, AI-related risks, and more. Learn more and RSVP below. #Cybersecurity #ArtificalIntelligence

3

Join us in our Boston office on October 30 for an in-depth program focused on modern cybersecurity, covering the current cyber threat landscape, advanced risk management techniques, AI-related risks, and more. Learn more and RSVP below. #Cybersecurity #ArtificalIntelligence

2

Interesting and useful information on the Network Neutrality issue. Personally, I think this issue needs to be addressed by Congress because the "pickleball" match will continue whenever the control of the FCC switches to the GOP and then again when Democrats have three votes on the Commission. Policy-wise, creating two different prices for digital transport is a big mistake. Watch for arbitragers to figure this out.

1

Insightful remarks by U.S. Department of Justice Principal Associate Deputy AG Marshall Miller on #nationalsecurity risks for #legal and #compliance teams to consider as well as questions executives and board members should be asking: "Every company’s legal and compliance functions should sit up and take note: national security risks are not only here—they’re accelerating. And they’re being supercharged by emerging technologies like artificial intelligence.” The Justice Department’s overhauled corporate criminal enforcement program places a particular premium on certain questions that executives and board members need to be asking: * Have we empowered our compliance leaders and invested sufficiently in our compliance program, given our risk profile and today’s geopolitical landscape? * Do we have effective internal detection and reporting systems and robust internal investigative capabilities — so we can avail ourselves of voluntary self-disclosure opportunities? * Have we designed compensation systems that promote compliance and enable clawbacks or escrowing of incentive comp? *Have we assessed risks associated with national security and emerging technologies and taken appropriate steps to mitigate them?

8

Recommended Reading: The US State Department has published the US International Cyberspace & Digital Policy Strategy. https://lnkd.in/ergJSQKF Excerpts on Digital Solidarity: * Digital solidarity recognizes the necessity of the domestic governance of digital and emerging technologies but seeks to develop shared mechanisms that will help maintain an open, interoperable, secure, and reliable Internet as well as trusted cross-border data flows. It works foster democratic values-based and rights-respecting policies. Excerpts on Cross-Border Data: * Support the Trusted Flow of Data and Advocate for Multistakeholder, Risk-Based Approaches to Digital and Data Governance. * Digital solidarity is built and reinforced through the joint development, harmonization, and mutual recognition of rights-respecting approaches to data governance and digital trade. This work is currently ongoing through mechanisms such as IPEF, APEP, Digital Transformation with Africa initiative (DTA), the G7, OECD, TTC, and the Quad. * The US supports the trusted free flow of data and an open Internet with strong and effective protections for individuals’ human rights and privacy and measures to preserve governments’ abilities to enforce laws and advance policies in the public interest. * Legitimate concerns about data privacy can be addressed through protective mechanisms that follow the data while at the same time facilitate cross-border data flows and strengthen global cooperation among enforcement authorities. * DoS will continue championing trusted cross-border data flows by promoting data transfer mechanisms that improve interoperability between different data privacy regimes [including in the EU-US Data Privacy Framework; the OECD Declaration on Trusted Government Access to Data Held by the Private Sector; and DFFT]. * Along with Australia, Canada, Japan, the Republic of Korea, Mexico, the Philippines, Singapore, and Taiwan, the US launched the Global Cross-Border Privacy Rules (CBPR) Forum in April 2022, building on the previously established Asia Pacific Economic Cooperation (APEC) CBPR system. The CBPR provides a data privacy certification backed by relevant authorities that facilitates data flows by promoting interoperable, enforceable data protection standards. DoS and DoC seek to bring new countries into the agreement via workshops in Kenya, Mexico, Chile, Brazil, UK, Israel, Jordan, Panama, Colombia, Fiji, and Barbados as well as ASEAN countries. * DoS works with DoJ to clarify application of the CLOUD Act and to negotiate bilateral agreements under it. Excerpts on the Digital Divide: Some 2.6 billion people still do not have access to the Internet, leaving a third of the world unconnected. ... The digital divide disproportionately affects women and other marginalized groups. For example, 80 percent of women in low-income countries do not use the Internet. 

22

The recent #CFPB report on state consumer #privacy laws and consumer financial data is an important read for anyone interested in the development of state privacy laws. From my perspective, post-election, the report offers a straightforward argument to state policymakers in their ongoing development of privacy legislation: stop exempting financial institutions. As the CFPB explains, existing federal laws protecting consumer financial data (the GLBA and FCRA) do not fully prevent the sharing of such data with third parties (among other things). State laws are becoming better equipped at offering robust protections to consumers; but by exempting GLBA and FCRA covered entities, consumers providing data to financial institutions will not reap the same benefits. As the CFPB explains, state privacy laws are generally not inconsistent with existing federal consumer financial data protection laws. What the CFPB doesn't say is that federal law in the privacy space is now unlikely to change in the foreseeable future, so it's up to states to extend protections to consumer financial data . Expect movement in this space on the state level, with this CFPB report existing as an important exhibit during that process. https://lnkd.in/e6XnvWwu

11

1 Comment

A good summary of the USG’s national security concerns driving AI-related export controls is in the preamble to this proposed rule https://lnkd.in/eNcfhyqj

75

1 Comment

VT comprehensive privacy bill down for the count? Hear more from Kyle G. Kessler (she/her), Christine Xiao and William Carter #privacylaw

8

This is a good summary of what the Chevron Deference means. If you are a cybersecurity person, or your company is subject to DoD regulations regarding cybersecurity, this matters to you. Could Brian Levine and Robert Metzger (and anyone else with good thoughts on it, Vincent Scott?) chime in on this #CMMC related question? Q: In early 2024, the DoD CIO released a memo about "FedRAMP equivalency" which altered the general understanding of which cloud solution providers were acceptable for the DoD's supply chain. Is this an example of an agency releasing guidance which alters the implementation of a federal regulation (DFARS 252.204-7012)? The implications of this memo are worth a lot (migrating to a different cloud vendor starts at thousands of dollars and goes up to millions of dollars of cost, per company). Does Chevron make this memo vulnerable to lawsuit? If this sort of thing is not what Chevron is about, can you provide a CMMC or DoD cybersecurity example of what might be challenged in the near future? Kieri Solutions - Authorized C3PAO

24

4 Comments

I'm back in sunny San Diego! This time for the InfoGov World Magazine conference and speaking on the collaborative efforts between IT, privacy, inforsec, and IM/DM with Arlette Walls, IGP, CIGO. If you'll be in San Diego let me know and let's connect. EVEN BETTER if you're attending the conference, let me know and let's connect. #IGW24 ___________________________________________________________________ Hi! My name is Maverick! #TheDataLawyer I’m the Founder & Managing Attorney for Avant-Garde Legal, PC I post about pretty much anything related to Data and why you should consider a legal/risk management approach first or in tandem to upping your tech stack. More so, I just like making content on how this applies in real life so follow share and engage with my posts! #data #dataprivacy #dataprotection #dataprotectionlaw #artificialintelligence #ai #databreach #privacy #privacylaw #privacypro #cybersecurity Check out my last post here: https://lnkd.in/ebDynX4u

26

The proposed draft amendments to the Colorado Privacy Act rules, released last week, are intended to keep pace with various amendments to the CPA, including its #biometrics identifiers provisions. https://lnkd.in/eG4fPAXK Regardless of whether all of the draft rules updates survive the final rulemaking process unscathed, the biometric-specific statutory amendments to the CPA take effect on July 1, 2025. So, for those businesses subject to the CPA, the length of time a biometric identifier will be retained will soon be a specific notice requirement (like in #BIPA) - something to keep in mind when updating #datagovernance and corporate document retention policies and schedules for next year. #sensitivedata

18