Several House members are working on proposals to preempt state AI laws with targeted federal regulations, Rep. Ted Lieu, D-Calif., said Tuesday.

The 9th U.S. Circuit Court of Appeals allowed to stand most of a California law that makes it illegal for internet-based services and applications to provide an addictive feed to users younger than 18, unless the operator doesn't know the user is a minor.

Age assurance can be a crucial step in online safety for children, so long as it’s done carefully and in a privacy-preserving way, said experts during a Public Knowledge event Monday. However, they warned that age assurance should be part of a larger response.

California legislators worked up to the wire to make a Sept. 5 deadline for amendments, revising several bills on privacy and AI that are nearing final votes. The legislature on Friday posted fresh amendments on legislation related to universal opt-out preference signals, kids online safety and automated decisions, among other subjects. The legislative deadline to pass bills is this Friday.

Age-estimation technology and its role in reducing regulatory burden is gaining attention in industry and data privacy circles, an official with BBB National Programs said Friday.

The EU General Court ruling upholding the EU-U.S. Data Privacy Framework "is not the end of the story," IAPP Chief Knowledge Officer Caitlin Fennessy said Thursday during a webinar. Wednesday's decision can and likely will be appealed, said data protection lawyers, adding that the ruling has implications for frameworks beyond the EU.

Misinformation and amendments derailed a bill on data-driven pricing, also called “surveillance pricing,” that was nearing the finish line in California. After Senate appropriators last week narrowed the legislation to apply only to grocery stores (see 2509020025), Assemblymember Chris Ward (D) punted AB-446 to next year, he said in a statement Thursday.

Google and Shein breached EU cookie rules, French data protection authority CNIL announced Wednesday, issuing fines of 325 million euros ($379 million) and 150 million euros ($175 million), respectively.

Google will appeal a court ruling that it violated privacy rights of almost 100 million users who asked the company not to track their data, a company spokesperson said following the jury verdict Wednesday. Meanwhile, the $425 million in damages against Google seem low, a privacy attorney said.

In what one data protection authority called a "milestone," the European Court of Justice (ECJ) held Thursday that pseudonymized data doesn't always have to be considered personal data under rules governing personal data protection.