Guiding Questions

• How do different jurisdictions' approaches to AI regulation (EU, California, Colorado, Utah, Washington) reflect varying priorities in protecting consumer privacy? What are the advantages and disadvantages of this regulatory fragmentation?
• What role should transparency and disclosure requirements play in AI regulation? Are they sufficient to protect consumer privacy?
• How effectively do existing privacy frameworks (like GDPR and CCPA) address the unique challenges posed by modern AI systems? What gaps remain?

Guest 

Hayley Tsukayama

Required 

Facts

• Tiffany Sadek et al. Artificial Intelligence Impacts on Privacy Law, RAND (Aug. 8, 2024)
• Bernard Marr, Spotting AI Washing: How Companies Overhype Artificial Intelligence, Forbes (Apr. 25, 2024).
• [Executive summary, Introduction, Conclusion] Jennifer King & Caroline Meinhardt, Rethinking Privacy in the AI Era, Stanford HAI (Feb. 2024).

Law

• EU AI Act
• Mia Hoffman, The EU AI Act: A Primer, CSET (Sept. 26, 2023).
• [Skim] First Draft of the General-Purpose AI Code of Practice published, written by independent experts, European Commission (Nov. 14, 2024).
• GDPR
• [read executive summary] Giovanni Sartor, The impact of the General Data Protection Regulation (GDPR) on artificial intelligence, EU.
• California → CCPA
• CCPA and the EU AI Act, California Lawyers Association (June 2024).
• [Skim FAQs] California Consumer Privacy Act (CCPA), State of California Department of Justice (Mar. 13, 2024).
• CAL. BUS. & PROF. CODE § 17941 (West 2019) (California Bot Law).
• Colorado → AI
• [Read Bill Summary] SB24-205, Consumer Protections for Artificial Intelligence, Colorado (2024).
• Utah → AI
• Alexander Sisto & K.C. Halm, Utah Enacts Consumer Disclosure Requirements for Businesses Using Bots and Generative AI, DWT (Apr. 29, 2024).
• Washington → My Data, My Health Act Washington
• Jacqueline Klosek et al., Washington’s My Health My Data Act Comes Into Force – What You Need to Know, and Do, Goodwin (Mar. 28, 2024).

Application

• CCPA
• People v. Sephora USA, Inc., No. [case number pending] (Cal. Super. Ct. filed Aug. 23, 2022) (Sephora Complaint). [read paragraphs 1-3, 10-13, 14-16, otherwise skim].
• People v. DoorDash, Inc., No. [case number pending] (Cal. Super. Ct. filed Feb. 21, 2024) (DoorDash Complaint) [read paragraphs 4-6, 7-12, 13-14, otherwise skim].
• GDPR
• Case C-131/12, Google Spain SL, Google Inc. v. Agencia Española de Protección de Datos (AEPD), Mario Costeja González, ECLI:EU:C:2014:317 (2014) (Google Spain).

Optional

• Amy Olivero & Anokhy Desai, Washington's My Health, My Data Act, iapp (Apr. 2023).

Guiding Questions

• How do state-level UDAAP laws complement federal enforcement in addressing AI-related consumer protection issues? What are the benefits and drawbacks of this dual enforcement approach?
• What constitutes "AI washing" in marketing claims, and how can existing UDAAP frameworks address these deceptive practices?
• Looking at recent enforcement actions (like the Pieces Technologies Settlement and Google case), what patterns emerge in how states are applying consumer protection laws to AI technologies?

Guest

Jared Rinehimer 

Required

Facts

• Bernard Marr, Spotting AI Washing: How Companies Overhype Artificial Intelligence (Apr. 2024).
• FTC, FTC Announces Crackdown on Deceptive AI Claims and Schemes (Sept. 2024).

Law

• [executive summary] Carolyn Carter, Consumer Protection in the States, National Consumer Law Center (Mar. 2018).
• Delaware UDAP
• [Parts I and II] Samuel Evan Milner, From Rancid to Reasonable: Unfair Methods of Competition under State Little FTC Acts, 73 AM. U. L. REV. 857 (February 2024). 
• [skim] Bryan M. Mull & Christopher R. Rahl, Newest 2022 Survey of CFPB UDAAP Actions Released, Gordon Feinblatt (Mar. 8, 2023).
• [skim] Justin J. Hakala, Follow-On State Actions Based on the FTC's Enforcement of Section 5, FTC (last accessed Dec. 15, 2024).

Application

• Pieces Technologies Settlement (TX, 2024) [paragraphs 12-21]
• MA Attorney General Advisory on the Application of the Commonwealth’s Consumer Protection, Civil Rights, and Data Privacy Laws to Artificial Intelligence (2024).
• Google Deceptive Practices Complaint (AZ, 2020) [paragraphs 1-14, 156-161]

Optional

Stephen P. Mulligan et al., Data Protection Law: An Overview, Congressional Research Service (Mar. 25, 2019).

Guiding Questions

• How should federal regulators balance promoting AI innovation against protecting consumers and maintaining market competition? Consider both historical examples and current regulatory approaches.
• Looking at both the SEC's report on algorithmic trading and Frazier's piece on AI flash crashes, what specific risks do automated AI systems pose in financial markets?

Guest

Matt Stoller

Required 

Facts

• Bob Violino, AI tools such as ChatGPT are generating a mammoth increase in malicious phishing emails, CNBC (Nov. 28, 2023).
• [Skim] Matt Stoller & Sahaj Sharda, The Google Search Trial: A New Era Beckons, Am. Econ. Lib. Pro. (Sept. 10, 2023).

Law

• FTC Act 
• [skim] FTC Policy Statement on Deception, FTC (Oct. 14, 1983).
• [Parts II and III] Samuel Evan Milner, Defining Unfair Methods of Competition in the Federal Trade Commission Act, 2023 Wisc. L. Rev. 109. 
• Fair Credit Reporting Act
• A Summary of Your Rights Under the Fair Credit Reporting Act, CFPB (last accessed Dec. 15, 2024).
• [Parts I, IV, VI] Staff Report on Algorithmic Trading in U.S. Capital Markets, SEC (Aug. 5, 2020).

Application

• In the Matter of Rytr LLC, Dissenting Statement of Commission Andrew N. Ferguson, FTC (Sept. 25, 2024).
• Background Dossiers and Algorithmic Scores for Hiring, Promotion, and Other Employment Decisions, CFPB (Oct. 24, 2024).
• Kevin Frazier, Selling Spirals: Avoiding an AI Flash Crash, LAWFARE (Nov. 8, 2024).
• [Skim] Justin Brookman, Protecting Consumers from Artificial Intelligence Enabled Fraud and Scams, Consumer Reports (Nov. 19, 2024).

Optional

Richard A. Schulman, Little F.T.C. Act: The Neglected Alternative, 9 J. MARSHALL J. PRAC. & PROC. 351 (Winter 1975-1976