Risk Assessment (Privacy Impact) Requirements

Orrick partner Shannon Yavorsky — head of the firm's Global Cyber, Privacy & Data Innovation group and co-lead of the AI practice — joins RegFi co-hosts Jerry Buckley and Sherry Safchuk to unpack newly approved California Consumer Privacy Act regulations. The conversation offers insights into the definitions and requirements for automated decision-making technology (ADMT), risk assessments, and cybersecurity audits, as well as open questions surrounding GLBA data carve-outs for financial services, and the reasons behind California's shift from defining "AI" to regulating ADMT use cases.

Links:

• Orrick AI Law Center
• Orrick Cyber, Privacy & Data Innovation
• Orrick Financial & Fintech Advisory
• RegFiPodcast.com