Topics
Regulation compliance teams follow beyond the core frameworks. A story is filed under a topic when it is substantially about it, alongside or instead of a framework.
- AI governanceLaws, rules and regulator guidance about AI systems: the EU AI Act, state AI and chatbot laws, automated decision-making rules and AI disclosure duties.3 stories
- Privacy and data lawsPrivacy and data laws beyond GDPR, CCPA and India’s DPDP Act: other US state laws, China’s PIPL, Brazil’s LGPD, biometric laws, data transfer rules and the EU Data Act.6 stories
- Children’s privacy and online safetyRules protecting children online: COPPA, age-appropriate design codes, age verification and minimum-age laws, the UK Online Safety Act and Digital Services Act duties.1 story
- Health privacy beyond HIPAAHealth data rules outside HIPAA: state medical privacy laws such as California’s CMIA, Washington’s My Health My Data Act, the FTC Health Breach Notification Rule and 42 CFR Part 2.4 stories
- Financial privacy and securityPrivacy and security rules for financial firms beyond PCI DSS and DORA: GLBA and its Safeguards Rule, NYDFS Part 500, SEC Regulation S-P and the FCRA.1 story
- Cybersecurity regulationCybersecurity laws and government cyber rules beyond NIST, ISO 27001 and DORA: NIS2, the Cyber Resilience Act, SEC incident disclosure, CMMC, CIRCIA and national cyber strategies.11 stories
- Consumer protection and marketingFTC and state attorney general actions on unfair or deceptive data practices, dark patterns, adtech and tracking pixels, and TCPA and e-marketing rules.3 stories