Last week, the New York State Legislature passed the One Fair Price Act (S.8623B/A.9349B) (the Act), a bill that prohibits businesses from using personal data—such as purchase history, browsing history, real-time location, income, or inferred household size—to generate individual prices
Latest from The Data Advisor - Page 2
Trump Administration Issues Executive Order on Advanced AI Innovation and Security
Key Takeaways
- The Executive Order, Promoting Advanced Artificial Intelligence Innovation and Security (Order), directs the creation of a framework for developers of advanced frontier models to engage with the federal government for a voluntary pre-release review of the models.
- The
European Commission Publishes Proposal for Act to Reduce Reliance on Foreign Cloud and AI
On June 3, 2026, the European Commission (EC) released its first draft of a proposed Cloud and AI Development Act (Proposal or CADA), marking a significant step forward in the EU’s efforts to strengthen its digital infrastructure and reduce strategic
YellowKey Zero-Day and the BitLocker Bypass: Compliance and Incident Response Implications
Key TakeawayA publicly disclosed and widely unpatched zero-day vulnerability, named YellowKey, permits anyone with physical access to a device running Windows 11 or Windows Server 2022/2025 to bypass BitLocker full-disk encryption (Microsoft’s built-in tool that acts like a digital vault
Connecticut Updates Its Data Privacy Act, Imposing Significant New Privacy Requirements
Last month, the Connecticut legislature passed two bills that amend and expand the Connecticut Data Privacy Act (CTDPA): Senate Bill 4 (SB 4) and House Bill 5222 (HB 5222). SB 4 (which was signed into law on May 27, 2026)
“Shadow AI” Triggers First SEC Form 8-K for Unauthorized AI Use: What Financial Institutions and Public Companies Need to Know
Key Takeaways
- CB Financial Services, Inc. filed the first SEC Form 8-K under Item 1.05 triggered by an unauthorized use of an artificial intelligence (AI) tool, not an external cyberattack.
- A cybersecurity incident caused by insider misuse of AI (known
Draft Guidelines Clarify Which AI Systems Are “High-Risk” Under EU AI Act
The European Commission has published draft guidelines (Draft Guidelines) to clarify the classification of high-risk AI systems under the European Union’s Artificial Intelligence Act (EU AI Act). This classification is crucial, as it determines whether an AI system will be
Colorado Legislature Repeals and Replaces Colorado AI Act: What SB 189 Means for Your Business
On May 14, 2026, Colorado Governor Jared Polis signed SB 189 into law, which repeals and replaces the Colorado Artificial Intelligence Act (CAIA). SB 189 goes into effect on January 1, 2027.Key Takeaways
- SB 189 pivots away from the CAIA’s
Consumer Protection Update: Insights into the First Year of the Trump-Vance FTC
In its first year under the Trump-Vance administration, the Federal Trade Commission (FTC) has aggressively enforced consumer protection and privacy laws and initiated new rulemakings. Although the new rulemaking activity is somewhat surprising in a Republican administration, the FTC has
EU AI Act Undergoes Significant Changes
On May 7, 2026, EU legislators reached a political agreement to amend the EU Artificial Intelligence Act (AI Act), with significant implications for AI companies operating in the EU. The most important changes are:
- delaying the application of the AI