Data Privacy Frontline Reports

Data Privacy Frontline Report

Global news from the frontlines of data privacy

Stay up to date on global news and regulatory changes, including legislative predictions, interactive tools, and cutting-edge research and implementation.

No results found.

Here are some suggested resources.

August 2025

  • US: The Department of Health and Human Services (HHS) has published guidance clarifying that Protected Health Information (PHI) may be disclosed between separate entities, provided the disclosure supports treatment activities.
  • EMEA: Israel has enacted Amendment 13 to its Protection of Privacy Law (1981), marking the most significant reform in the country’s privacy framework to date.
  • US: Lawmakers in Colorado have postponed the implementation of the Colorado AI Act (CAIA)—the first comprehensive U.S. law regulating high-risk AI systems—from February 1, 2026, to June 30, 2026.

July 2025

  • US: The White House has unveiled a sweeping AI Action Plan focused on removing regulatory barriers to accelerate innovation and adoption, fostering US AI dominance, and attempting again to stop state-level regulation.
  • EU: The European Commission will uphold implementation deadlines for the Artificial Intelligence Act, including its August compliance deadline for general-purpose AI systems, despite calls from member states and industry leaders for delays.
  • APAC: China has proposed creating a new global AI cooperation organization to promote inclusive development, positioning itself as a leader in shaping international norms for artificial intelligence.

June 2025

  • US: The Senate has given up a proposed moratorium on state laws regulating AI after a near-unanimous vote to abandon the provision.
  • APAC: China has issued a new national standard detailing security measures for sensitive information, aligning closely with the Personal Information Protection Law (PIPL) and supplying operational guidance.
  • EMEA: The UK Data (Use and Access) Act 2025 (DUAA) has become law and includes clarification on the use of personal information for research, a data protection complaints procedure, and a new lawful basis of legitimate interests.

May 2025

  • US: The House of Representatives has narrowly passed a bill banning US states from enacting and enforcing AI regulations for 10 years. The bill is now before the Senate.
  • EU: The European Commission has published its proposal to simplify the GDPR, seeking to ease compliance for small mid-cap enterprises by extending certain exemptions and clarifying record-keeping requirements.
  • Global: Agencies from the US, Australia, New Zealand, and the UK, among others, have produced a joint report on best practices for the secure use of data when training and operating AI systems.

April 2025

  • EU: The European Commission is set to propose reforms in the coming weeks to simplify the GDPR and help make European businesses more competitive.
  • US: Attorneys general from 21 states have formed a coalition and filed a brief to challenge the firing without cause of two Federal Trade Commission (FTC) commissioners.
  • EMEA: The UAE cabinet has approved the creation of a new Regulatory Intelligence Office, which will be supported by an unprecedented AI-powered regulatory system.

March 2025

  • EU: The European Commission has proposed a 6-month extension to its two UK adequacy decisions, allowing the Commission time to assess its options for renewal while keeping current data flows uninterrupted.
  • US: The White House has fired both Democratic FTC Commissioners, leaving only two Republicans on what is meant to be a five-person bipartisan bench and raising concerns about the impact on EU-US data flows.
  • APAC: China has released new provisions to its existing regulation on cross-border data transfer, easing compliance requirements for some data exporters.

Not finding what you're looking for?

Contact Us

Archiving / Destroying

Are you unleashing the full value of data you retain?

Your Challenges

Do you need help...

  • Unleashing the full value of retained data so they can be put to work safely and responsibly in line with privacy regulation?
  • Defining and implementing effective archival and disposal processes for personal data?

OUR SOLUTION

Value Retention

  • Retain the business value in your data through anonymization.
  • Ensure compliance in your retention & destruction strategy.
  • Maximize the reuse of information by removing what is personal.

Client Success

Client: Comcast

Situation: California’s Consumer Privacy Act inspired Comcast to evolve the way in which they protect the privacy of customers who consent to share personal information with them.

Read the full story >

Evaluating

Are you achieving intended outcomes from data?

Your Challenge

Do you need help...

  • Optimizing the use / analysis of data to achieve your organization’s intended outcomes with measured success?

OUR SOLUTION

Unbiased Results

  • Reduce / minimize risk of bias in your data for machine learning.
  • Ensure transparency, fairness, and AI ethics / compliance.
  • Ensure data ethics & compliance in your data models and results.

Client Success

Client: Integrate.ai

Situation: Integrate.ai’s AI-powered tech helps clients improve their online experience by sharing signals about website visitor intent. They wanted to ensure privacy remained fully protected within the machine learning / AI context that produces these signals.

Read the full story >

Accessing

Do the right people have the right data?

Your Challenges

Do you need help...

  • Ensuring the right people have access to the right data at the right times?

OUR SOLUTION

Usable and Reusable Data

  • Enable internal access and / or external sharing of data for primary and / or secondary uses.
  • Ensure data are useful and reusable in alignment with FAIR principles.
  • Ensure data have the right level of privacy protection for the use.

Client Success

Client: Novartis

Situation: Novartis’ digital transformation in drug R&D drives their need to maximize value from vast stores of clinical study data for critical internal research enabled by their data42 platform.

 

See the full story >

Maintaining

Are you empowering people to safely leverage trusted data?

Your Challenges

Do you need help...

  • Maintaining / processing data securely and efficiently to promote data enablement with auditable proof of compliance?

OUR SOLUTION

Security / compliance efficiency

  • Creating synthetic versions of data to be used for innovation / AIML.
  • Applying data minimization principles to reduce your risk exposure.
  • Transforming your data for secondary uses and access.

CLIENT SUCCESS

Client: ASCO’s CancerLinQ

Situation: CancerLinQâ„¢, a subsidiary of American Society of Clinical Oncology, is a rapid learning healthcare system that helps oncologists aggregate and analyze data on cancer patients to improve care. To achieve this goal, they must de-identify patient data provided by subscribing practices across the U.S.

 

Visit ASCOPubs.org to read the full story >

Acquiring / Collecting

Are you acquiring the right data? Do you have appropriate consent?

Your Challenge

Do you need help...

  • Ensuring the acquisition / collection of the right data under the appropriate consent / contracts to maintain corporate integrity?

OUR SOLUTIONS

Consent / Contracting strategy

  • Developing a consent / contractual framework for collecting / sourcing.
  • Creating a comms strategy for internal / external stakeholders.
  • Ingesting and transforming data safely to earn trust.

Client Success

Client: IQVIA

Situation: Needed to ensure the primary market research process was fully compliant with internal policies and regulations such as GDPR. 

 

Read the full story >

Planning

Are You Effectively Planning for Success?

Your Challenges

Do you need help...

  • Defining a clear data strategy to achieve desired outcomes?
  • Getting it right at the start to avoid costly privacy missteps later?

OUR SOLUTION

Build privacy in by design

  • Building privacy into your data plan / platform / pipeline upfront.
  • Establishing a trusted data strategy (ethics, compliance, privacy).

Client Success

Client: Nuance

Situation: Needed to enable AI-driven product innovation with a defensible governance program for the safe and responsible use
of voice-to-text data under Shrems II.

 

Visit Nuance.com to read the full story >

Join the next 5 Safes Data Privacy webinar

This course runs on the 2nd Wednesday of every month, at 11 a.m. ET (45 mins). Click the button to register and select the date that works best for you.

Register Now