Our Work

Digital Library

Sort By

EPIC Awards the Tire Meu Rosto da Sua Mira Campaign as EPIC International Privacy Champions

May 29, 2024
- Data Protection
- Democracy & Free Speech
- Face Surveillance & Biometrics
- International Privacy
- International Privacy Laws
- Privacy & Racial Justice
- Privacy in Public
- Privacy Laws
- Surveillance Oversight
- Updates
EPIC Urges UK ICO to Prohibit “Consent or Pay” Business Models

April 22, 2024

On April 17, EPIC submitted comments to the UK ICO on its call for views relating to “Consent or Pay” business models. In its comments, EPIC urged the ICO to prohibit the use of the facially illegal business model due to the clear violation of the UK GDPR’s definition of consent.
- Big Data
- Consumer Privacy
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
EU Lawmakers Clinch Deal on Landmark Artificial Intelligence Legislation

December 11, 2023

Late Friday night, EU policymakers reached a political agreement on the final terms of the Artificial Intelligence Act.
- AI Policy
- Artificial Intelligence and Human Rights
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
Top EU Court Rules Against Use of Automated Decision-Making Algorithms in Credit Information Industry

December 11, 2023

The CJEU ruled that the creation of an automated “probability value based on personal data concerning his or her ability to meet payment commitments in the future” by a credit information agency constitutes an “automated individual decision making” within the meaning of Article 22.
- AI Policy
- Artificial Intelligence and Human Rights
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Screening & Scoring
- Updates
EDPB Clarifies Ban on Meta’s Processing of Personal Data for Targeted Advertising

December 8, 2023

On December 7th, the EDPB clarified that a contract is not a legitimate purpose for Meta’s processing of personal data, striking down the subscription service model.
- AI Policy
- Artificial Intelligence and Human Rights
- Big Data
- Commercial AI Use
- Consumer Privacy
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Social Media Privacy
- Updates
EDPB Orders Stop to Meta’s Behavioral Advertising

November 2, 2023

On October 27, the European Data Protection Board (EDPB) adopted an urgent binding decision that the Irish Data Protection Authority (DPA) must ban Meta from behavioral advertising in the European Economic Area by November 10th.
- Big Data
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- International Privacy Laws
- Privacy Laws
- Social Media Privacy
- Updates
EPIC Urges UK ICO To Address Law Enforcement Use of Private Data/Systems, Security Issues, AI, and “Soft Biometrics” in Draft Biometric Data Guidance

October 23, 2023

In comments filed October 20th, EPIC urged the UK ICO's Identity and Trust Team (Technology Policy) to make updates to its draft biometric data guidance. In particular, we recommend that the guidance be expanded to (i) address the pervasive ties between law enforcement and private companies' biometric data and systems; (ii) establish baseline security standards for biometric processing, including a template risk assessment; and (iii) detail the risks of scale and scope of harm present where AI is integrated into biometric systems.
- Data Protection
- Enforcement of Privacy Laws
- Face Surveillance & Biometrics
- International Privacy
- International Privacy Laws
- Privacy in Public
- Privacy Laws
- Surveillance Oversight
- Updates
India Passes Digital Personal Data Protection Bill

August 9, 2023

India's Digital Personal Data Protection Bill has passed both the upper and lower houses of Parliament and will soon be signed into law.
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
European Commission Adopts Adequacy Decision for EU-U.S. Data Privacy Framework

July 10, 2023

The European Commission has formally adopted an adequacy decision for the EU-U.S. Data Privacy Framework (the Framework). U.S. and EU authorities developed the Framework to replace Privacy Shield, a data transfer framework which was deemed non-compliant with the GDPR in the Schrems II case.
- Communications Privacy
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- FISA Section 702
- Intelligence Surveillance
- International Privacy
- International Privacy Laws
- Privacy Laws
- Surveillance Oversight
- Updates
EPIC Comments on EU Metaverse Vision

May 23, 2023
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates

Support Our Work

EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.

Donate