Recent lawsuits against multiple U.S. federal agencies have reignited debates about the adequacy of the 50-year-old Privacy Act in governing modern data practices. At the center of these legal challenges is Elon Musk's government efficiency initiative, (DOGE) which allegedly received sensitive personal data through improper transfers from
The surge in data breaches across industries has made class action litigation a cornerstone of cybersecurity accountability. In 2024 alone, over 1,488 data breach class actions were filed in the U.S., nearly tripling since 2022[17][32]. High-profile settlements, such as Meta’s $1.4 billion biometric data
AI compliance
As federal AI regulation stalls, states are racing to fill the gap with laws targeting algorithmic bias, transparency, and accountability. By February 2025, 14 states have introduced AI-specific legislation, with Colorado, Texas, and California leading divergent approaches. This guide analyzes their frameworks, compliance requirements, and strategies for multi-state operations. AI
Canada's National Cyber Security Strategy for 2025 is a comprehensive plan to secure Canada's digital future by addressing evolving cyber threats and promoting cyber resilience. The strategy emphasizes collaboration between the government, private sector, academia, and citizens to protect Canadians and Canadian businesses. Key aspects of
DORA
The Digital Operational Resilience Act (DORA) is a European Union regulation designed to strengthen the IT security of financial entities and ensure the financial sector remains resilient during severe operational disruptions. DORA applies to a wide range of financial entities and ICT third-party service providers. It aims to harmonize digital
NIS2
The NIS2 Directive [(EU) 2022/2555] is a legislative framework designed to enhance cybersecurity across the European Union by establishing a high common level of security for network and information systems. It builds upon the original NIS Directive, expanding its scope and strengthening requirements to address evolving cyber threats. Member
AI compliance
Introduction As Artificial Intelligence (AI) becomes increasingly integrated into organizations, the need for responsible AI practices and compliance with regulations like the AI Act is growing. Internal audit (IA) departments can play a crucial role in guiding organizations toward responsible AI implementation and ensuring compliance. The AI Safety Report The
right to repair
Introduction Modern agriculture is increasingly reliant on advanced technology. From GPS-guided autosteering to sophisticated onboard computers, today's farm equipment is a far cry from the tractors of the past. This technological revolution, however, has sparked a significant conflict between farmers and manufacturers over the right to repair. Farmers
LGPD
LGPD Enforcement Landscape The Brazilian National Data Protection Authority (ANPD) has escalated enforcement of the LGPD since 2023, issuing warnings, fines, and operational restrictions. Key penalties include: * Fines: Up to 2% of a company’s Brazilian revenue (capped at BRL 50 million (~$10 million) per violation). * Non-monetary sanctions: Public disclosure
US regulations
The recent introduction of Senator Josh Hawley's "Decoupling America’s Artificial Intelligence Capabilities from China Act" marks a pivotal moment in U.S.-China tech relations, following seismic market disruptions caused by Chinese AI firm DeepSeek. The legislation seeks to sever all collaborative AI development ties
data protection
Global Data Protection Enforcement Beyond GDPR: Key Frameworks and TrendsThe European Union’s General Data Protection Regulation (GDPR) has long been the gold standard for data privacy, but a wave of new regulations worldwide is reshaping the global compliance landscape. From California to Vietnam, governments are imposing stricter rules and
How Noem, Patel, Ratcliffe, and Gabbard aim to reshape federal cyber policy—and the risks of deregulation amid rising threats.ShareRewrite Kristi Noem's appointment as Secretary of Homeland Security has sparked significant debate about the future of the Cybersecurity and Infrastructure Security Agency (CISA), with implications for state