Our Work

Digital Library

Sort By

EDPB Clarifies Ban on Meta’s Processing of Personal Data for Targeted Advertising

On December 7th, the EDPB clarified that a contract is not a legitimate purpose for Meta’s processing of personal data, striking down the subscription service model.
- AI Policy
- Artificial Intelligence and Human Rights
- Big Data
- Commercial AI Use
- Consumer Privacy
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Social Media Privacy
- Updates
Law360: Departing Irish Privacy Regulator Leaves ‘Big Shoes To Fill’
- Data Protection
- International Privacy
- News
EDPB Orders Stop to Meta’s Behavioral Advertising

On October 27, the European Data Protection Board (EDPB) adopted an urgent binding decision that the Irish Data Protection Authority (DPA) must ban Meta from behavioral advertising in the European Economic Area by November 10th.
- Big Data
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- International Privacy
- International Privacy Laws
- Privacy Laws
- Social Media Privacy
- Updates
Biometric Update.com: EPIC urges changes to UK ICO’s biometric data guidance
- AI in the Criminal Justice System
- Face Surveillance & Biometrics
- International Privacy
- News
EPIC Urges UK ICO To Address Law Enforcement Use of Private Data/Systems, Security Issues, AI, and “Soft Biometrics” in Draft Biometric Data Guidance

In comments filed October 20th, EPIC urged the UK ICO's Identity and Trust Team (Technology Policy) to make updates to its draft biometric data guidance. In particular, we recommend that the guidance be expanded to (i) address the pervasive ties between law enforcement and private companies' biometric data and systems; (ii) establish baseline security standards for biometric processing, including a template risk assessment; and (iii) detail the risks of scale and scope of harm present where AI is integrated into biometric systems.
- Data Protection
- Enforcement of Privacy Laws
- Face Surveillance & Biometrics
- International Privacy
- International Privacy Laws
- Privacy in Public
- Privacy Laws
- Surveillance Oversight
- Updates
EPIC Comments to the UK ICO’s Office for the Consultation on the Draft Biometric Data Guidance
- Anonymity
- Data Protection
- Democracy & Free Speech
- Face Surveillance & Biometrics
- International Privacy
- Location Tracking
- Privacy in Public
- Surveillance Oversight
- Comments
Generative AI and Elections: The Approaching Train Wreck

If you already find parsing through election ads and campaign speeches to get to the truth difficult, just wait for what is ahead with a 2024 election season filled with generative AI generated ads. Misinformation and disinformation already exist in our elections, but generative AI will exacerbate this problem, leaving voters flooded with information and unable to sort out what is real.
- AI Policy
- Artificial Intelligence and Human Rights
- Commercial AI Use
- Consumer Privacy
- Cybersecurity
- Data Protection
- Democracy & Free Speech
- Election Security
- Government AI Use
- International Privacy
- Voter Privacy
- Web Scraping
- Analysis
Microsoft Adapts AI Governance Blueprint for India

Microsoft recently published a white paper adapting its AI Governance Blueprint for India, setting out policy ideas and recommendations tailored to India's governance and regulatory structure
- AI Policy
- Artificial Intelligence and Human Rights
- Commercial AI Use
- Data Protection
- Government AI Use
- International Privacy
- Updates
India Passes Digital Personal Data Protection Bill

India's Digital Personal Data Protection Bill has passed both the upper and lower houses of Parliament and will soon be signed into law.
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
European Commission Adopts Adequacy Decision for EU-U.S. Data Privacy Framework

The European Commission has formally adopted an adequacy decision for the EU-U.S. Data Privacy Framework (the Framework). U.S. and EU authorities developed the Framework to replace Privacy Shield, a data transfer framework which was deemed non-compliant with the GDPR in the Schrems II case.
- Communications Privacy
- Consumer Privacy
- Data Protection
- Enforcement of Privacy Laws
- FISA Section 702
- Intelligence Surveillance
- International Privacy
- International Privacy Laws
- Privacy Laws
- Surveillance Oversight
- Updates

Support Our Work

EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.

Donate