IAF Thursday Chat

Is 2022 going to be a rerun of 2021?  Privacy operations will continue to focus on data subject rights.  Yet data subjects’ rights are ultimately about individuals managing the fair use of data pertaining to them.  Late last year NTIA held a listing session that reiterated that the individual as the primary means for managing data pertaining…

IAF Special Privacy Week Policy and Strategy Call

If the reason for the United States to enact comprehensive privacy legislation is to protect against negative outcomes, then those outcomes need to be identified.  The IAF model privacy legislation suggests the negative outcomes to be targeted are “Adverse Processing Outcomes.”  Others have suggested the target should be preventing harm, and professors Citron and Solove…

IAF Thursday Chat

The IAF Thursday Chat returns February 3rd and there is much to discuss.  The UK government announced the “Brexit Freedoms Bill” January 31, stating: UK Government consulted in the autumn on proposals that seek to create an ambitious, pro-growth and innovation-friendly UK data protection regime that underpins the trustworthy use of data. The Government will be publishing…

IAF Policy & Strategy Call on Risk Shape Shifting

There are times that a research question changes the further one gets into a research project.  The more the IAF delved into the “Risk of what?” project, the more we saw the question of “Risk of what?” as being like the “Boggart” from "Harry Potter and the Prisoner of Azkaban” - a shape-shifting creature that assumes the form of…

IAF Side Event April 11 on New Governance Models that Preserve Positive Innovative Data Uses

     Please join us for a CLE seminar The new risk calculus for data-forward companies in an age of escalating cyber and adverse consequence third-party risk:  Their risk is your risk   Please join DLA Piper, The Information Accountability Foundation, and The Providence Group to explore data use risk governance that anticipates tomorrow’s regulatory…

IAF Thursday Chat

Does weak state privacy legislation enhance data sustainability and therefore operational resilience?  I don’t think so.  I have read the passed legislation in Iowa, and I am left disappointed.  The Iowa law mimics the Colorado, Connecticut, and Virginia laws without some of the provisions which give them teeth, like the data protection assessment requirements. The U.S. needs comprehensive…