Our Work

Digital Library

Sort By

ProPublica: How Cambridge Analytica Used Intimate Data to Exploit Gun Owners’ Private Lives

February 27, 2025
- Consumer Privacy
- Data Protection
- International Privacy Laws
- U.S. Privacy Laws
- News
In TikTok v. Garland, Supreme Court Sends Good Vibes for Privacy Laws, But Congress’s Targeting of TikTok Alone Won’t Do Much to Protect Privacy

January 17, 2025

We need protections from all tech companies, not just TikTok, and we can only achieve that through a strong, comprehensive federal privacy law, vigorous antitrust enforcement, and other regulatory measures that apply to all companies exploiting our personal data. But overexpansive First Amendment interpretations pushed by the tech industry are a dangerous obstacle to the types of laws necessary to truly protect Americans’ privacy rights. In taking a more cautious First Amendment stance, the Supreme Court signaled the general viability of privacy and online safety laws.
- Consumer Privacy
- Data Protection
- International Privacy Laws
- Platform Accountability & Governance
- Privacy Laws
- The First Amendment
- U.S. Privacy Laws
- Analysis
A Civil Society Call to the New European Leadership

November 27, 2024
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
Tech & Society Summit Joint Statement: A Civil Society Call to New European Leadership

November 27, 2024
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
EPIC Awards the Tire Meu Rosto da Sua Mira Campaign as EPIC International Privacy Champions

May 29, 2024
- Data Protection
- Democracy & Free Speech
- Face Surveillance & Biometrics
- International Privacy
- International Privacy Laws
- Privacy & Racial Justice
- Privacy in Public
- Privacy Laws
- Surveillance Oversight
- Updates
The Drum: New EU probe into Meta’s ‘addictive’ features & age verification may put brands on edge

May 16, 2024
- Consumer Privacy
- International Privacy Laws
- Social Media Privacy
- News
Generating Harms

May 14, 2024
- Access to Information
- AI in the Criminal Justice System
- AI Policy
- Artificial Intelligence and Human Rights
- Children's Privacy
- Commercial AI Use
- Communications Privacy
- Competition and Privacy
- Consumer Privacy
- Cybersecurity
- Data Brokers
- Data Protection
- Data Security
- Democracy & Free Speech
- Election Security
- Enforcement of Privacy Laws
- Government AI Use
- Government Records & Privacy
- Health and Reproductive Privacy
- International Privacy
- International Privacy Laws
- Online Harassment
- Privacy Laws
- Proposed U.S. Legislation
- Robocalls
- Screening & Scoring
- Social Media Privacy
- Student Privacy
- U.S. Privacy Laws
- U.S. State Privacy Laws
- Web Scraping
- Workplace Privacy
EPIC Urges UK ICO to Prohibit “Consent or Pay” Business Models

April 22, 2024

On April 17, EPIC submitted comments to the UK ICO on its call for views relating to “Consent or Pay” business models. In its comments, EPIC urged the ICO to prohibit the use of the facially illegal business model due to the clear violation of the UK GDPR’s definition of consent.
- Consumer Privacy
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Updates
EPIC Comments to UK ICO Call for Views on “Consent or Pay” Business Models

April 22, 2024

By notice published March 6, 2024, the United Kingdom’s Information Commissioner’s Office (“UK ICO” or “the ICO”) has called for views regarding “consent or pay” business models (hereinafter “the Consultation”) to close on April 17, 2024.[1] This Consultation is intended to address an emerging business model where individuals are blocked from accessing a website unless they consent to their personal information being processed for the purpose of targeted advertising, or, as the ICO puts it, “pay a fee and not be tracked.”
- Consumer Privacy
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Web Scraping
- Comments
Summary: What does the European Union Artificial Intelligence Act Actually Say?

February 23, 2024

Covering everything from ChatGPT to the systems used to build freight truck cabins, the European Union’s Proposed Artificial Intelligence Act (“AI Act” or “the Act”) is a piece of tech legislation rivaled only in scope by the GDPR. The sweeping harms-based structure categorizes artificial intelligence systems by preconceived risks to fundamental rights, public safety, and public health (prohibited, high-risk, and low or no-risk systems).
- AI Policy
- Artificial Intelligence and Human Rights
- Data Protection
- International Privacy
- International Privacy Laws
- Privacy Laws
- Analysis

Support Our Work

EPIC's work is funded by the support of individuals like you, who allow us to continue to protect privacy, open government, and democratic values in the information age.

Donate