China took another step toward data privacy protection, passing national-level Personal Information Protection legislation. Along with other data rules taking effect this fall, companies will be required to make sure their data storage and processing practices are in order. It could curtail practices around personalized recommendations and what kinds of data can be moved across borders. In this episode, Stanford internet policy expert and attorney James Dempsey discusses why national-level privacy legislation in the United States is still elusive and lays out why the bad guys are winning in the fight against cybercrime. He also discusses what can be done when artificial intelligence makes it harder to provide equal access to opportunities.