Analysis

A Health Privacy ‘Check-Up’: How Unfair Modern Business Practices Can Leave You Under-Informed and Your Most Sensitive Data Ripe for Collection and Sale

June 5, 2025

• Artificial Intelligence and Human Rights

• Commercial AI Use

• Consumer Privacy

• Data Protection

• Health and Reproductive Privacy

• Analysis

The Seven Year Itch: On the GDPR’s Anniversary, A Look At Its History, Legacy, and Uncertain Future

June 4, 2025

• Competition and Privacy

• Consumer Privacy

• Cybersecurity

• Data Brokers

• Data Minimization

• Data Protection

• Data Security

• Enforcement of Privacy Laws

• International Privacy

• International Privacy Laws

• Privacy Laws

• Analysis

When Courts Reach The Merits, Spyware Loses

May 8, 2025

On April 28, 8 jurors were empaneled to decide how much NSO Group, the notorious mercenary spyware company, would be fined for hacking WhatsApp servers in order to spy on millions of Americans. On May 6, jurors gave their decision: NSO Group’s flagrant violation of the law would cost them $444,719 in statutory damages and $167.25 million in punitive damages, striking a major blow to the infamous company.

• Fourth Amendment

• Intelligence Surveillance

• Privacy Laws

• Surveillance Oversight

• Analysis

Concern over Potential 23andMe Data Sale Highlights Weaknesses of State Privacy Laws 

May 2, 2025

While the United States’ lack of a comprehensive federal privacy law allows privacy harms to continue threatening Americans daily, 23andMe’s recent bankruptcy shines a spotlight on the problem.

• Data Protection

• Health and Reproductive Privacy

• Privacy Laws

• U.S. Privacy Laws

• Analysis

Bankrupt Genetic Data: Minimizing and Privacy-Protecting Data from the Start

April 14, 2025

The scenario now at hand—an untold number of buyers able to potentially grab up the genetic data troves collected and analyzed by 23andMe—is a forceful reminder of the need for better data privacy and security protections. Nothing can eliminate the possibility that a company collecting data goes bankrupt. But companies and policymakers can and should do better in mitigating the risks from any potential bankruptcy-data fallout ahead of time.

• Consumer Privacy

• Cybersecurity

• Data Minimization

• Data Protection

• Data Security

• Health and Reproductive Privacy

• Analysis

Update: Tracking of Real Algorithmic Harms in California as Enforcement Continues

April 3, 2025

As part of our project Assessing the Assessments—supported by the Rose Foundation—EPIC is continuing to track instances of real AI harms that are relevant to enforcement of the California Consumer Privacy Act.

• Artificial Intelligence and Human Rights

• Risk Assessments

• Screening & Scoring

• Analysis

Ninth Circuit To Hear Oral Argument in Case About Whether Algorithms Directed to Induce Habit-Forming Behavior Are Protected Speech

April 2, 2025

• Age Assurance

• Platform Accountability & Governance

• Platform Governance Laws & Regulations

• The First Amendment

• Analysis

Don’t Believe Data Brokers Saying Data Deletion Is Snake Oil

March 31, 2025

A recent op-ed claiming authorized agent providers are selling "privacy snake oil" is misleading. and shift the focus away from harmful data brokers, EPIC Scholar in Residence Justin Sherman argues.

• Consumer Privacy

• Data Brokers

• Analysis

Is OPM More Interested in Surveillance than Privacy? Our Lawsuit Is Trying to Answer That 

March 19, 2025

For 30 years, FOIA has been one of EPIC’s most valuable tools for holding government accountable to the people. In this post, we will look at EPIC’s latest FOIA lawsuit against the Office of Personnel Management (OPM) to understand why EPIC filed this case and how the information we seek will lead to meaningful accountability. 

• Cybersecurity

• Data Protection

• Data Security

• Freedom of Information Act

• Government Records & Privacy

• Open Government

• Workplace Privacy

• Analysis

As Above Doesn’t Have to Be Below: States Should Be a Counterweight to Eroding Federal Transparency

March 18, 2025

We face a crisis of institutional legitimacy across the federal government. States can preserve and enhance democracy by acting as a valuable counterweight to the breakdown of federal transparency measures and implement much needed reform.

• Access to Information

• Democracy & Free Speech

• Freedom of Information Act

• Open Government

• Surveillance Oversight

• Analysis