Information Governance in the AI age
The Privacy Commissioner has found that American Express Australia Limited (Amex) interfered with an individual’s privacy by failing to take reasonable steps to protect personal information from unauthorised employee access, in breach of APP 11.1. The decision is a significant reminder that insider access is not a peripheral cyber-security issue. […]
Privacy Awareness Week 2026 highlights a clear shift in regulatory emphasis. Privacy trust is not built by policies alone. It is built through fair collection practices, meaningful transparency, accessible complaint handling, disciplined data minimisation, careful AI governance and reliable records of decisions and actions. For information governance professionals, May is […]
The U.S National Institute of Standards and Technology (NIST) released the Privacy Framework 1.1 Initial Public Draft (IPD) on 14 April 2025. The NIST Privacy Framework is a ‘living’ tool meant to evolve to meet stakeholder needs, and the time has come to update to Version 1.1. This update builds […]
As part of the Paris AI Action Summit, Privacy and Data Privacy Commissioners from Australia, Korea, Ireland, France and the UK signed a joint statement to reaffirm commitment to establishing data governance that fosters innovative and privacy-protective AI. That statement sets out that, ‘AI should be developed and deployed in […]
The OECD has published a report mapping the principles set out in the OECD Privacy Guidelines to the OECD AI Principles. As explained in the report, ‘AI and privacy policy communities often address these issues independently, with approaches that vary between jurisdictions and legal systems. These silos can generate misunderstandings, add complexities […]
The European Commission has opened formal proceedings to assess whether Meta, the provider of Facebook and Instagram, may have breached the Digital Services Act (DSA). The proceedings will focus on suspected infringements of Meta’s policies and practices involving: Deceptive advertisements and disinformation Visibility of political content The non-availability of an effective third-party […]
The Federal Trade Commission (FTC) and the UK’s Information Commissioner’s Office (ICO) are both actively enforcing non-compliant website cookie banners. In the U.S., the FTC have announced proposed settlements arising from three enforcement actions, reflecting the FTC’s ‘heightened focus on pervasive extraction and mishandling of consumers’ sensitive personal data.’ In mid-February, the FTC […]
This week the European Commission has adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The decision concludes that the United States ensures an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to US companies under the new […]
On the 5th anniversary of commencement of the GDPR, Věra Jourová, Vice-President for Values and Transparency, and Didier Reynders, Commissioner for Justice, issued a statement highlighting that the GDPR was a decisive step in shaping the digital transition in the EU, setting global standards for the safe regulation of data […]
On 14 December 2022, the OECD members adopted the Declaration on Government Access to Personal Data held by Private Sector Entities. It is an intergovernmental agreement on common approaches to safeguard privacy and other human rights and freedoms when accessing personal data for national security and law enforcement purposes, and […]
On 15 December 2022, the OECD members adopted the Declaration on a Trusted, Sustainable and Inclusive Digital Future. The Declaration calls on the OEDC through the Committee on Digital Economy Policy (CDEP) to develop policy standards and guidance for a trusted, sustainable, inclusive digital future for our countries that reflect […]
Posted with permission from Active Navigation, originally published on June 1. Ten years ago, there was no such thing as too much data. Notions about data being the “new oil” prompted organizations to horde every byte they could, hoping that they might be able to harness it down the road. […]
