On May 31, 2024, Colorado Governor Jared Polis signed HB 1130 into law. This legislation amends the Colorado Privacy Act to add specific requirements for the processing of an individual’s biometric data. This law does not have a private right
Privacy & Data Security
SEC statement clarifies material cybersecurity incident disclosure requirement
SEC final rule on reporting material cybersecurity incidents
In July 2023, the US Securities and Exchange Commission (SEC) finalized its rule requiring public companies to disclose material cybersecurity incidents under Item 1.05 of Form 8-K. Though materiality is not a…
Council of Europe Adopts International Treaty on Artificial Intelligence
On May 17, 2024, the Council of Europe adopted the Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (the “Convention”). The Convention represents the first international treaty on AI that will be legally binding…
Darren Abernethy Featured on Hsu Untied Podcast

GT Shareholder Darren Abernethy is featured on an episode of the Hsu Untied podcast, hosted by Richard Hsu. They discuss his career path from practicing telecommunications law to following his passion for data privacy and advertising technology law, advice for young lawyers,…
The Colorado Artificial Intelligence Act: What You Need to Know
BIPA Bellwether: General Assembly provides relief from “per scan” damages

In a welcome change for defendants, a recent amendment to the Biometric Information Privacy Act (“BIPA”) is expected to significantly curtail potential damages under the statute. SB 2979, which passed the General Assembly on May 16, 2024, clarifies that damages…
Singapore Publishes Generative AI Model Governance Framework

On May 30, 2024, Singapore’s AI Verify Foundation and Infocomm Media Development Authority published its Model AI Governance Framework for Generative AI (GenAI Framework).
Was the GenAI Framework Consulted Upon?
Yes, a draft of the GenAI Framework was open for…
SEC Expands Security and Breach Notification Requirements for Investment Firms

On May 16, 2024, the U.S. Securities and Exchange Commission (SEC) announced that it had adopted final amendments to its Regulation S-P (the Rule or Amended Rule), which governs “covered financial institutions’” treatment of consumers’ nonpublic personal information, to ensure…
Recent Executive Order and DOJ Rulemaking Prioritize the Protection of Sensitive Personal Data from “Countries of Concern”

The U.S. is cracking down on data sharing and export with foreign countries. A clear example of the United States’ position is seen in Executive Order 14117 (EO 14117) issued by President Biden on February 28, 2024.
Titled “Preventing…
Italy Proposes New Artificial Intelligence Law

On May 20, 2024, a proposal for a law on artificial intelligence (“AI”) was laid before the Italian Senate.
The proposed law sets out (1) general principles for the development and use of AI systems and models; (2) sectorial provisions,…