Resources

On January 13, 2025, California Attorney General Rob Bonta issued an advisory detailing legal obligations for healthcare entities using AI and automated decision systems (ADS). The advisory highlights compliance with state laws, focusing on reducing bias, protecting privacy, and ensuring informed consent. Prohibited practices include biased predictions that deny care, overriding medical decisions, and discriminatory treatment analyses. AI use must comply with privacy laws like HIPAA and the CCPA, with explicit protections for sensitive data, including reproductive health. Entities must avoid dark patterns, ensure transparency, and uphold patient autonomy, with the AG warning of strict enforcement to safeguard equity and patient rights.

UK Introduces DMCCA Law to Regulate Big Tech with New Competition Powers - One of the most significant updates to UK competition law in the digital age. The legislation establishes a framework for regulating companies with significant market power in the UK’s digital economy, building on existing European efforts to regulate major technology platforms. Companies must have either global turnover exceeding £25 billion or UK turnover above £1 billion to qualify for “Strategic Market Status” (SMS) designation. The regulatory approach matches similar frameworks being implemented globally, including the EU’s Digital Markets Act, while incorporating provisions specific to the UK market. These requirements may include preventing self-preferencing of products, mandating competitor access to data, requiring interoperability, and ensuring transparency of algorithms.

New York State has taken a significant step forward in ensuring that **its use of AI is carried out responsibly.** The act’s emphasis on human oversight, regular impact assessments, and transparency reflects a comprehensive approach to **integrating technology into government operations without compromising individual rights.** The primary objective of the LOADinG Act is **to regulate the deployment of automated decision-making systems by state agencies.** The law mandates measures such as impact assessments and evaluations of cybersecurity vulnerabilities and privacy risks. Governor Kathy Hochul also signed into law a package of legislation **that address various aspects of digital privacy, security, and consumer protection.** For example, one law mandates that social media companies **clearly display their terms of service** to inform users and submit reports on these terms to the attorney general, with penalties for non-compliance.