lawyer, sometimes | doing data protection & tech policy at @futureofprivacy (views mine) (she/her).

Washington, D.C.
Joined November 2009
📢 Last call for Fritz Fellow applications! We are looking for a current @GeorgetownLaw student who will conduct research on technologies used in the collection, storage, and analysis of DNA evidence being developed by corporations and sold to U.S. police departments.
1
4
4
797
Stacey Gray retweeted
💡 New blog! We do a deep dive into the Kids Online Safety and Privacy Act (KOSA/COPPA 2.0), looking at: 1⃣ its novel knowledge standard 2⃣ narrow preemption 3⃣ the duty of care 4⃣ changes to VPC 5⃣ comparisons to state laws Read it at fpf.org/blog/contextualizing…
12
6
15
5,433
Asked by @staceygraydc abt what are the limits of exisiting law to protect consumers facing harms raising from AI, Sam Levine, Director of the Consumer Protection Bureau @FTC says that he feels confident in the authority the FTC has under current law. #AIForward @futureofprivacy
1
8
14
1,617
It’s #Friday and I have an hour, so I thought it would be fun to live-tweet a read of my colleague @gabrielazanfir's team’s latest 82-pg report on Data Protection by Design & by Default. 🔥 American friends, this is just the fancy European term for Privacy by Design (PbD) 1/(?)
1
4
2
18
5,862
Ok first we take a dive into the history and origins of PbD... some highlights: - Ann Cavoukian 🔥 - FTC explicitly recognized PbD in their 2021 Report - ISO 31700 - never-ending criticisms about clarity and limited scope (controllers only i.e. not service providers) 10/
1
191
Listen up: Privacy Enhancing Technologies (PETs) can help comply with Art. 25, but PETs =/= PbD. The report points to a growing body of guidance on PETs & notes that this is an important role for #EDPB to update its 9-yo guidelines on #anonymization and #pseudonymization 11/
1
304
[P.S. I'm gonna accept all @gabrielazanfir likes on this thread as endorsement]
1
185
Congratulations @MargotKaminski !!
I'm heading to the EU next year as a Fulbright Scholar!
6
234
Stacey Gray retweeted
Businesses should brace for the passage of Washington’s My Health My Data Act, which is all but certain now. It’s a much broader law than BIPA and it has a much broader private right of action. lawfilesext.leg.wa.gov/bienn… (thread 👇)
1
11
2
22
5,672
So you thought your IAPP GPS Panel was cute….you’ve just found your greatest competition 🥰🧢👒🎩🎓 @tatiianarice @cobun @Policy_DrDivya @Brandon_J_Pugh
6
24
1,314