Sign in Subscribe

Lydia

What Is an AI System Under the EU AI Act—and How Is It Classified?

What Is an AI System Under the EU AI Act—and How Is It Classified?

What counts as an AI system under the EU AI Act? Explore Article 3’s broad, technology-neutral definition, the key concepts of autonomy and inference, the distinction between AI systems and GPAI models, and how systems are classified under the Act’s risk-based framework.

California’s CIPA Problem: How a 1967 Wiretap Law Became a Website-Tracking Litigation Machine—and What SB 690 Would Change

California’s CIPA Problem: How a 1967 Wiretap Law Became a Website-Tracking Litigation Machine—and What SB 690 Would Change

How did a 1967 wiretap law become a weapon against modern website tracking? CIPA has fueled claims over pixels, cookies, session replay, and pen registers. California’s SB 690 could sharply narrow that litigation—but it would leave important CIPA risks intact.

Canada’s Federal Private-Sector Privacy Law: The Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada’s Federal Private-Sector Privacy Law: The Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada’s PIPEDA establishes the federal framework for private-sector privacy, regulating how organizations collect, use, disclose, safeguard, and retain personal information. This article explains its scope, consent rules, individual rights, accountability duties, and breach requirements.

General-Purpose AI Models Under the EU AI Act: Classification, Obligations, and Systemic Risk

General-Purpose AI Models Under the EU AI Act: Classification, Obligations, and Systemic Risk

The EU AI Act regulates general-purpose AI at the model level. This article explains GPAI classification, provider obligations, open-source accommodations, downstream responsibilities, and the additional requirements for models that present systemic risk.

California’s Song-Beverly Credit Card Act: Privacy Rules at the Checkout Counter

California’s Song-Beverly Credit Card Act: Privacy Rules at the Checkout Counter

California’s Song-Beverly Credit Card Act limits the personal information businesses may collect during credit card transactions, regulates card receipts, and creates significant compliance risks. Here’s what businesses need to know about this early California privacy law.

California’s Frontier AI Transparency Act: Building an Ongoing Safety and Oversight System for Powerful General-Purpose AI Models

California’s Frontier AI Transparency Act: Building an Ongoing Safety and Oversight System for Powerful General-Purpose AI Models

California’s Transparency in Frontier Artificial Intelligence Act (TFAIA) brings AI safety into legal compliance, requiring frontier developers to publish disclosures, report critical safety incidents, and—for the largest developers—adopt and follow formal AI safety frameworks.

California’s AI Voice Disclosure Rule: When Robocalls Must Tell You the Voice Is Artificial

California’s AI Voice Disclosure Rule: When Robocalls Must Tell You the Voice Is Artificial

California now requires disclosure when certain automated calls use AI-generated or significantly AI-altered voices. AB 2905 adds the rule to existing robocall law, requiring an upfront natural-voice announcement before the prerecorded message plays.