23andMe, a pioneer in the DNA testing kit industry, announced that it has filed for Chapter 11 bankruptcy protection and recently asked to select an independent customer data representative regarding any sale of user data. Its bankruptcy raises issues about data privacy and what companies must do to protect that data for the benefit of their customers and to protect themselves from litigation or violations of US and international privacy laws.Continue Reading Follow the Breadcrumbs: Where Does Consumer Data Go as 23andMe Goes Bankrupt?
Data Rights
OMB Issues Guidance to Agencies on Responsible Artificial Intelligence Acquisitions
Contractors interested in offering federal agencies artificial intelligence (AI) can now glean insight into how agencies are expected to conduct AI acquisitions. On September 24, 2024, the Office of Management and Budget (OMB) issued Memorandum M-24-18, Advancing the Responsible Acquisition of Artificial Intelligence in Government (the Memorandum), providing guidance and directing agencies “to improve their capacity for the responsible acquisition of AI” systems or services, including subcomponents. The Memorandum builds on the White House’s Executive Order 14110, Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence, and OMB Memorandum M-24-10, Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence. Taking effect on March 23, 2025, M-24-18 will apply to all solicitations and contract option exercises for AI systems covered under the Memorandum.Continue Reading OMB Issues Guidance to Agencies on Responsible Artificial Intelligence Acquisitions
Coming Soon? The American Data Privacy and Protection Act (SPOILERS)

Sure, America has the Grand Canyon, baseball, and apple pie, but you know what it doesn’t have? A nationwide data protection law. Instead, data protection has been left up to a pastiche of state laws, regulations, and enforcement actions that demand many companies choose one state law to rule them all. California led the pack, being the first to pass a data protection law, the California Consumer Privacy Act of 2018, going into effect January 1, 2020. Following California, only four other states have successfully enacted a data protection law, with Colorado and Virginia passing such laws in 2021 and Utah and Connecticut in 2022.Continue Reading Coming Soon? The American Data Privacy and Protection Act (SPOILERS)
iEdison’s 2020 New Year’s Resolution – Improvement! Time to Submit Your Comments

The Interagency Edison (“iEdison”) system is the principal mechanism for preserving rights to title in Government-funded inventions. Its use is now mandatory per 37 CFR 401.16, and we expect FAR 52.227-11, Patent Rights – Ownership by the Contractor, to see parallel amendments soon. Despite its use by multiple agencies to satisfy the reporting obligations imposed on funding recipients under the Bayh-Dole Act, most agree and recognize that the system is broken…badly broken.
Continue Reading iEdison’s 2020 New Year’s Resolution – Improvement! Time to Submit Your Comments