The FTC continues to crack down on privacy and cybersecurity, including issuing a new warning to tax preparation companies and entering into a consent decree with 1Health.io. VPPA and BIPA litigation continues to dominate the courts, including a denial of a motion to dismiss regarding worker’s voiceprints. In California, a federal judge enjoined enforcement of the Age-Appropriate Design Code Act. On the international level, Canada issued a Generative AI Code of Conduct for feedback, and the EU-DPF survives a court case.
According to a survey conducted by KPMG, 75% of companies are not in a position to obtain third-party assurance on their published ESG data. This is despite the fact that two-thirds of companies must disclose such data, or will soon be expected to do so, on a mandatory basis.