Our Work

Digital Library

Sort By

EDPB Orders Stop to Meta’s Behavioral Advertising

On October 27, the European Data Protection Board (EDPB) adopted an urgent binding decision that the Irish Data Protection Authority (DPA) must ban Meta from behavioral advertising in the European Economic Area by November 10th.
- Big Data
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- International Privacy Laws
- Privacy Laws
- Social Media Privacy
- Updates
EPIC Urges UK ICO To Address Law Enforcement Use of Private Data/Systems, Security Issues, AI, and “Soft Biometrics” in Draft Biometric Data Guidance

In comments filed October 20th, EPIC urged the UK ICO's Identity and Trust Team (Technology Policy) to make updates to its draft biometric data guidance. In particular, we recommend that the guidance be expanded to (i) address the pervasive ties between law enforcement and private companies' biometric data and systems; (ii) establish baseline security standards for biometric processing, including a template risk assessment; and (iii) detail the risks of scale and scope of harm present where AI is integrated into biometric systems.
- Data Protection
- Enforcement of Privacy Laws
- Face Surveillance & Biometrics
- International Privacy
- International Privacy Laws
- Privacy in Public
- Privacy Laws
- Surveillance Oversight
- Updates
Microsoft Adapts AI Governance Blueprint for India

Microsoft recently published a white paper adapting its AI Governance Blueprint for India, setting out policy ideas and recommendations tailored to India's governance and regulatory structure
- AI Policy
- Artificial Intelligence and Human Rights
- Commercial AI Use
- Data Protection
- Government AI Use
- International Privacy
- Updates
India Passes Digital Personal Data Protection Bill

India's Digital Personal Data Protection Bill has passed both the upper and lower houses of Parliament and will soon be signed into law.
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
European Commission Adopts Adequacy Decision for EU-U.S. Data Privacy Framework

The European Commission has formally adopted an adequacy decision for the EU-U.S. Data Privacy Framework (the Framework). U.S. and EU authorities developed the Framework to replace Privacy Shield, a data transfer framework which was deemed non-compliant with the GDPR in the Schrems II case.
- Communications Privacy
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- FISA Section 702
- Intelligence Surveillance
- International Privacy
- International Privacy Laws
- Privacy Laws
- Surveillance Oversight
- Updates
EPIC Awards Johnny Ryan, Beeban Kidron as EPIC International Privacy Champions
- Children's Privacy
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- Updates
Ireland Fines Meta €1.2 Billion, Orders Halt of Personal Data Transfers to U.S.

ompany to suspend transfers of personal data to the United States within five months, finding that Meta’s transfers violation the EU’s General Data Protection Regulation.
- Consumer Privacy
- Data Protection
- FISA Section 702
- International Privacy
- Surveillance Oversight
- Updates
EPIC Comments on EU Metaverse Vision
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
EU Parliament Approves AI Act, Urges Rejection of Transatlantic Data Framework

uropean Parliament held a series of meetings, resulting in adopting both the text of the AI Act and a resolution outlining risks and proposals for change in the currently-proposed EU-U.S. Data Privacy Framework.
- AI in the Criminal Justice System
- AI Policy
- Artificial Intelligence and Human Rights
- Commercial AI Use
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- International Privacy Laws
- Privacy Laws
- Screening & Scoring
- Web Scraping
- Updates
Italy Bans ChatGPT and Begins Investigating Potential GDPR Violations by OpenAI

Yesterday, the Italian Data Protection Authority (DPA) issued an order under the GDPR requiring OpenAI to immediately stop processing local user data, effectively blocking ChatGPT until OpenAI complies with European data protection laws. The DPA’s order comes at a time of increased scrutiny over ChatGPT and similar generative A.I. models.
- Artificial Intelligence and Human Rights
- Commercial AI Use
- Consumer Privacy
- Enforcement of Privacy Laws
- International Privacy
- Updates

Support Our Work

EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.

Donate