Publications

  • The State Data Privacy Act

    September 24, 2024

    In our State Data Privacy Act, we set forth a compromise bill built on existing state laws that meaningfully protects privacy while encouraging innovation.

    • Consumer Privacy

    • Data Minimization

    • Privacy Laws

    • U.S. State Privacy Laws

    • Publications

  • AI Legislation Scorecard

    June 25, 2024

    EPIC set out to create a tool to evaluate the growing wave of AI bills. Our AI Legislation Scorecard is a first-of-its-kind rubric for lawmakers, journalists, and others to use when evaluating the strength of AI bills across key metrics.

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Privacy Laws

    • U.S. State Privacy Laws

    • Publications

  • Generating Harms II

    May 15, 2024

    One year after its initial report on the harms stemming from generative AI tools, EPIC is releasing a new report identifying additional harm areas and examining proposals that have been put forth to remedy generative AI harms.

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Publications

  • The State of Privacy: How State “Privacy” Laws Fail to Protect Privacy and What They Can Do Better

    February 1, 2024

    EPIC scores existing state privacy laws and makes recommendations for stronger laws.

    • Consumer Privacy

    • Data Minimization

    • Privacy Laws

    • U.S. Privacy Laws

    • U.S. State Privacy Laws

    • Publications

  • Outsourced & Automated: How AI Companies Have Taken Over Government Decision-Making

    September 27, 2023

    Building on two years of state contracting research, EPIC publishes new report on the oft-forgotten world of government AI procurement.

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Government AI Use

    • Publications

  • Generating Harms: Generative AI’s Impact & Paths Forward

    May 23, 2023

    EPIC's report on generative A.I. harms and the policy interventions that can mitigate them.

    • AI Policy

    • Artificial Intelligence and Human Rights

    • Commercial AI Use

    • Publications

  • Screened and Scored in D.C.

    November 1, 2022

    EPIC spent 14 months investigating the D.C. government’s use of automated decision-making systems. This report aims to shed light by providing as comprehensive a view as possible of the many automated decision-making systems that shape the course of District residents’ lives.

    • Artificial Intelligence and Human Rights

    • Screening & Scoring

    • Publications

  • Scam Robocalls: Telecom Providers Profit

    June 1, 2022

    This report explains the depth of the scam robocall problem, the reasons for the problem, and how the Federal Communications Commission has responded. EPIC and NCLC recommend several simple strategies that would stop most, if not all, of these fraudulent robocalls.

    • Consumer Privacy

    • Robocalls

    • Publications

  • How the FTC Can Mandate Data Minimization Through a Section 5 Unfairness Rulemaking

    February 3, 2022

    This paper argues that the FTC should use its Section 5 unfairness authority to establish a Data Minimization Rule to prohibit all secondary data uses with limited exceptions, ensuring that people can safely use apps and online services without having to take additional action.

    • Consumer Privacy

    • Data Minimization

    • Data Protection

    • Enforcement of Privacy Laws

    • Publications

  • What the FTC Could Be Doing (But Isn’t) To Protect Privacy

    October 13, 2021

    EPIC's report "What the FTC Could Be Doing (But Isn't) to Protect Privacy" highlights numerous statutory authorities that the Federal Trade Commission has failed to use to safeguard privacy. EPIC identifies untapped or underused powers in the FTC's toolbox and explains how the FTC should deploy them to protect the public from abusive data practices.

    • Enforcement of Privacy Laws

    • Publications