California: New AI laws in California – roundup of the 2025 legislative session
This article was originally published by OneTrust DataGuidance on November 24, 2025 and can be found on the DataGuidance website here. California introduces comprehensive AI laws focusing on transparency, children’s safety, healthcare, antitrust, and law enforcement. California has taken an aggressive stance towards artificial intelligence (AI) legislation and will likely set the standard for other […]
Comparing EU and US AI legislation: déjà vu to 2020
This article was initially published in Reuters and Thomson Reuters Westlaw Today. Lily Li of Metaverse Law discusses the landscape for AI legislation, with the passage of the European Union’s AI Act while states pass AI bills with differing thresholds, coverage and subject matter. The landscape for EU and US AI legislation feels […]
AI vendor management – human programming for machine learning
Machine learning and artificial intelligence (AI) have permeated the supply chain. The reasons are apparent. Low cost and efficiency are an easy sell in today’s economy, with rampant inflation in the supply chain and tight labor markets. Yet, the economic motivation for AI must be tempered by human (or human-programmed) review of AI systems. Rules […]
The Risks of LLMs and Generative AI
[Modified version originally published as International Insights Article: Privacy implications for organizations using generative AI, by Lily Li, on OneTrust DataGuidance, June 2023.] Well, the cat is out of the bag – or at least the chat is. Generative AI and large language models (“LLMs”) are here to stay. From philosophical conversations between the dead […]
Chatbot Contracts: Enforcing TOS Agreements in Computer-Generated Conversations
[Although the rise of generative AI and large language models may seem novel, regulation of chatbots extends back years. To demonstrate, here is an article originally published by Metaverse Law’s founder and president, Lily Li, in the Spring 2017 Orange County ABTL Report.] Humanity has long imagined self-aware computers that can pilot our vehicles, purchase […]
Guidance on Artificial Intelligence and Data Protection
[Updated: March 7, 2024] For many of us, Artificial Intelligence (“AI”) represents innovation, opportunities, and potential value to society. For data protection professionals, however, AI also represents a range of risks involved in the use of technologies that shift processing of personal data to complex computer systems with often opaque processes and algorithms. Data protection […]
Two-Party Consent Requirements for Recording Calls
For a call recording to be lawful, federal law [1] and most states require at least one party to the conversation to consent to the recording. However, many states go further, requiring two-party (or all-party) consent for a call to be lawfully recorded. As the following list demonstrates, navigating the state law nuances of two-party consent […]
EU-US Data Transfers After Schrems II: European Commission Publishes New Draft Standard Contractual Clauses
**Update: On June 4, 2021, the European Commission formally adopted the new standard contractual clauses (“SCCs”) for international personal data transfers. Businesses will have a grace period of 18 months from the effective date of the European Commission’s decision to update all existing SCCs for transfers outside the European Union with the new SCCs. In the meantime, businesses will […]