top of page
IAF Blog
The latest updates and articles from the IAF


The IAF Celebrates Ten Years of Focusing on Accountability and Governance
The IAF celebrates its 10th anniversary in 2023, and recently published our annual report – 2022 Highlights and 2023 Policy Directions ....
-
Feb 21, 20232 min read


Making Data Driven Innovation Work
It is increasingly understood digital agendas in both the public and private sectors are about creating safe pathways for data to turn...
-
Feb 14, 20234 min read


Who Is Paying the Policy Debt?
Everyone! There is a technology concept called the “tech debt.” It accumulates over time when software development applies the easy and...
-
Jan 27, 20234 min read


A Principled Approach to Data Protection Risk Balancing
Data is necessary for information, and information is necessary for knowledge. Knowledge can be used to advance as well as hinder...
-
Dec 13, 20221 min read


Let’s Return Risk to the Risk Based Approach
Professor Lokke Moerel is right. The European data protection commissioners have done their best to use cases, guidance, and opinions to...
-
Oct 24, 20223 min read


Location Data and Evidence for the FTC ANPR
I was well into writing a blog related to the Federal Trade Commission’s advanced notice of proposed rulemaking (ANPR) on “Commercial...
-
Sep 1, 20224 min read


The Summer of New Data Protection Redirection
Canada and the United Kingdom are putting forward fair processing ideas that I believe will lead to a new direction in the way data...
-
Jul 12, 20224 min read


The Right to Privacy is as Important as the Right to Use Guns
Due to the recent mass shootings, especially those of shoppers at a Buffalo supermarket and of school children in Uvalde, there is much...
-
Jun 6, 20223 min read


IAF Testifies on Pre-Rulemaking for California Privacy Rights Act
California set in motion a major milestone by creating a data protection authority, the California Privacy Protection Agency (“CPPA”)...
-
May 10, 20222 min read


There are Many Reasons to Worry About Data Transfers, but the Austrian DPA Second Google Analytics Decision Should not be one of Them
Noyb’s posting that the “risk-based approach” to data transfers has been rejected is disingenuous. Moreover, the Austrian Data...
-
May 4, 20224 min read


The Shape Shifting Nature of Privacy Risk Management
For the past decade, the privacy ecosystem, company CPOs, policymakers, regulators, academics, advocates, the courts and others have been...
-
Apr 6, 20224 min read


Verified Governance is Coming Like a Runaway Freight Train
There is growing evidence that data forward processes will require governance that considers impacts not just to privacy and cyber...
-
Feb 16, 20222 min read


AI Impact Assessments Are Necessary and Additive to Existing Business Processes
A paradox exists due to the growing use of artificial intelligence (AI) enabled technology. The adoption of AI by more and more...
-
Oct 19, 20214 min read


UK Alters the Trajectory for Global Data Protection Objectives
The UK Government’s consultation, “Data: A New Direction” (“Consultation”), reframes the objectives for data protection in a manner not...
-
Sep 15, 20213 min read


Does the Conduct of Observation Merit Dedicated Legislation?
Do pervasive watching and recording cause risks to individuals and society that justify new legislation specific to this risk? Digital...
-
Sep 9, 20213 min read


When Data Protection Is Not About Data Protection
Data protection law is not always about data protection or privacy; sometimes it is just about power. Last week I was bothered by tweets...
-
Aug 25, 20213 min read


My Head Spins – UK Gets Adequacy As Task Force Says GDPR Must Change
The EU Commission today (June 28, 2021) announced that the UK has been granted adequacy for data flows from Europe to the UK. The UK...
-
Jun 28, 20212 min read


AI and the Road to Expansive Impact Assessments
Assessments related to the complex use of data pertaining to people are about to expand significantly requiring new skills by both...
-
May 20, 20213 min read


A Trusted Digital Ecosystem Requires Glass Breaking Legislative Change – IAF Summit Recap
The observational age that drives change in all avenues of human life requires data governance marked by an orderly transition to...
-
Apr 21, 20213 min read


The Movement Towards Demonstrable Accountability – Why It Matters
First published in IAPP Daily Dashboard There is “accountability tension” going on which has the potential to stifle technology and data...
-
Dec 14, 20204 min read
bottom of page