The Information Accountability Foundation

What The Information Accountability Foundation does

The Information Accountability Foundation (IAF) is an independent, non-profit think tank founded in 2013 by Marty Abrams, headquartered virtually and operating with a small staff of fewer than ten people following an October 2024 restructuring. IAF's core function is developing policy research, accountability frameworks, and assessment methodologies that help organizations demonstrate responsible data processing and AI governance to regulators worldwide. Its intellectual output includes the Demonstrable Accountability Framework, the Risk/Data Protection Assessment (RDPA) framework for U.S. state privacy laws, AI and Algorithmic Impact Assessment frameworks, a multi-dimensional risk/benefit weighing methodology, and model legislation such as the FAIR and OPEN USE ACT. These frameworks are published through the IAF website and delivered via the IAF Digital University seminar series, multistakeholder workshops, and policy engagements with OECD expert groups, APEC Data Privacy Subgroups, the Global CBPR Forum, and the Global Privacy Assembly.

IAF operates as a membership-supported non-profit, funded primarily through annual corporate membership dues (individual, corporate, and group tiers) supplemented by project-based funding from data protection authorities and government agencies. Its member base spans 20+ named multinational enterprises across technology (Apple, Meta, Cisco, HP, Workday, TikTok), pharmaceuticals (Pfizer, Merck, Johnson & Johnson), financial services (MasterCard, Dun & Bradstreet, Sun Life), telecommunications (AT&T, TELUS), legal services (DLA Piper, Ropes & Gray), IT services (Cognizant), and advertising (IPG/Kinesso). The organization is governed by a Board of Directors chaired by Scott Taylor (Chief Privacy Officer at Johnson & Johnson). Leadership includes Executive Director Fred H. Cate (Indiana University Distinguished Professor), Chief Policy Strategist Stan Crosley (former Chief Privacy Officer at Eli Lilly and IAPP Westin Emeritus Fellow), and Senior Strategist Steve Wood (former UK ICO Deputy Commissioner). Following the October 2024 restructuring, IAF streamlined administrative operations while maintaining its substantive policy research, global convening activities, and member services.

Name

The Information Accountability Foundation

Legal name

The Information Accountability Foundation

Website

https://informationaccountability.org

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

1–10 employees

Short description

The Information Accountability Foundation is an independent non-profit think tank that develops accountability frameworks, AI impact assessments, and model legislation for multinational corporations, data protection authorities, and policymakers navigating global data governance and AI regulation.

Ownership category

akta.pro rank

Product category

Privacy Policy Research and Data Governance Advisory

NAICS

Professional Organizations (81392), Business Associations (813910)

SIC

Services-Membership Organizations (8600)

akta.pro primary industry

Fraud Risk Management & Anti-Bribery/Anti-Corruption (ABAC) (BPAHAFAL)

Keywords

• Data privacy policy
• Information accountability
• AI governance frameworks
• Data protection research
• Regulatory compliance advisory

Headquarters

HQ city

Plano

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others

Revenue model

1. Corporate Membership Contributions: The IAF is primarily funded by corporate contributions from companies that believe data should only be processed by organizations that act in a responsible and answerable manner. The organization offers individual, corporate, and group memberships with varying benefit levels. Companies interested in supporting or participating can inquire through the website.
2. Government Agency Project Funding: The IAF is also funded by data protection agencies and government agencies that join IAF in exploring particular research topics, leading to modernized information policy approaches. Government agencies can reach out to discuss projects.

Pricing tiers

Distribution channels5 records

Marketing channels9 records

Core offering

The Information Accountability Foundation (IAF) is an independent, non-profit think tank that develops intellectual frameworks, assessment methodologies, and policy guidance for data accountability, AI governance, and privacy regulation. It delivers these through research publications, model legislation, workshops, multistakeholder sessions, the IAF Digital University, and a corporate/individual/government membership program. The core deliverables include the Demonstrable Accountability Framework, Risk/Data Protection Assessment (RDPA), AI Impact Assessment, Algorithmic Impact Assessment, Legitimate Interest Framework, and model legislation such as the FAIR and OPEN USE ACT.

Product overview

The Information Accountability Foundation (IAF) is a non-profit independent think tank that does not offer a unified software product or platform. Instead, IAF provides a portfolio of research frameworks, assessment methodologies, educational programs, and policy guidance designed to help organizations implement accountability-based information policy and data stewardship. The core offerings include: the Demonstrable Accountability Framework and Risk/Data Protection Assessment (RDPA) Framework for U.S. State Privacy Law compliance; AI Impact Assessments and Algorithmic Impact Assessments for evaluating AI systems; the Legitimate Interest Framework for understanding lawful data processing bases; and the AI and Digital Governance Workshop series and IAF Digital University for education. The FAIR and OPEN USE ACT model legislation represents their policy drafting contribution. These frameworks and programs are delivered through multistakeholder sessions, workshops, publications, and membership programs, rather than through software products.

Differentiator

Problem solved

Functional benefit

Products and services

• Demonstrable Accountability Framework A normative assessment framework for demonstrating accountability and compliance with U.S. State Privacy Laws. It enables organizations to weigh risks and benefits of AI competently and with integrity, factoring in multiple stakeholders, benefits, and risks.
• Risk/Data Protection Assessment (RDPA) Framework A normative assessment framework developed for U.S. State Privacy Laws requirements. Incorporates AI/Algorithmic Impact Assessment elements, multi-dimensional proportionality from IAF's Principled Approach to Rights and Interests Balancing, and the Omidyar Ethical Framework for Technology. Capable of demonstrating results mathematically or pictorially.
• AI Impact Assessment (AIA) Framework developed in consultation with AI experts and practitioners for assessing AI systems. Addresses risks raised by data uses in algorithms and expands on GDPR Article 35's Data Protection Impact Assessments.
• Algorithmic Impact Assessment Assesses potential benefits, risks, and controls to achieve responsible and ethical AI. Developed jointly with PwC in 2021 to address risks associated with AI that require more expansive and rigorous assessments than current data protection laws require.
• Legitimate Interest Framework Explores the expanded use of legitimate interest for data processing, providing clarity around how legitimate interest works, what laws and existing guidance provide, and how to create standards and best practices. Online sessions with industry leaders, regulators, and experts produce reports.
• Model Legislation (FAIR and OPEN USE ACT) Model fair processing legislation designed to inform legislative processes in the United States and other jurisdictions in response to risks from accelerated use of observational data, advanced analytics, model development, and AI.
• AI and Digital Governance Workshops A hybrid workshop series for regulators, industry leaders, and others to engage in knowledge building and practical discussions of core issues such as AI and Bias, Data for Developing and Refining AI, AI and Legitimate Interest, and AI Governance within Institutions. Workshops produce short whitepapers.
• IAF Digital University Seminars for policymakers and influencers on how legacy and new technologies work and how best practices may be applied to governance. Delivered at Maastricht University in Brussels, the Data Protection Commission in Dublin Ireland, and with Canadian and U.S. officials.
• Data for Marketing Initiative Partners with economists, business and trade organizations, and data protection officials to host workshops and summits that produce white papers on the costs and benefits of personal data for marketing and responsible best practices for minimizing risks.
• Best Practices for Accountability Tools Explores new and emerging tools for accountability, focusing initially on AI/Digital Governance Review Boards. Goals include providing shared vocabulary, developing best practices for responsible data governance, and creating standard-setting processes for specific tools.

Quantifiable outcome

• Development of the first Binding Corporate Rules (BCRs) framework approved under EU Data Protection Directive in 2009
• +2 more outcomes

Named customers20 records

Segments3 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Ten partnerships are on record, tiered core and minor.

• Red Barn StrategycoreStrategic or Co-development Partner · 1 January 2022Red Barn Strategy is a strategic consulting firm co-created by Fred Cate (IAF Executive Director) and Stan Crosley (IAF Chief Policy Strategist) in 2022. The firm partners with government and private organizations to advance strategic data management, security, and use. IAF and Red Barn Strategy work together on data governance engagements with multinational corporations, start-ups, and non-profits across the business ecosystem.
• OECD (Organisation for Economic Co-operation and Development)coreStrategic or Co-development PartnerThe IAF is a member of the 'experts' group at the OECD which advises on new guidance for privacy accountability related to advanced analytics and AI. This provides IAF with direct input into international policy development on data governance.
• APEC Data Privacy Subgroup and Global Cross Border Privacy Rules (CBPR) ProjectcoreStrategic or Co-development PartnerThe IAF is an invited guest at the APEC Data Privacy Subgroup and the Global CBPR project. IAF staff actively participate in Global CBPR Forum events, leading panels on interoperability and serving as thought leaders on the evolution of the CBPR framework.
• Global Privacy Assembly (GPA)coreStrategic or Co-development PartnerThe IAF Chief Policy Officer is a member of the GPA Programme Advisory Committee. IAF executives have served on the committee for conferences in Bermuda (2023), Hong Kong, Morocco, Mauritius, Poland, Mexico, UK, and Australia. This provides IAF with a platform to contribute to global privacy policy discussions.
• Maastricht University (Brussels Campus)minorStrategic or Co-development PartnerThe IAF conducts specialized seminars for data protection authorities and policy developers at Maastricht University's Brussels campus as part of the IAF Digital University program.
• Data Protection Commission (Ireland, Dublin)minorStrategic or Co-development PartnerThe IAF conducts specialized seminars for data protection authorities and policy developers at the Data Protection Commission in Dublin, Ireland as part of the IAF Digital University program.
• Canadian and U.S. Government OfficialsminorStrategic or Co-development PartnerThe IAF conducts specialized seminars for data protection authorities and policy developers with Canadian and U.S. officials as part of the IAF Digital University program.
• International Association of Privacy Professionals (IAPP)minorStrategic or Co-development PartnerThe IAF actively partners with IAPP on events, including hosting panels at IAPP Brussels. Elizabeth Denham serves as an IAPP Board Member. Stan Crosley is a former board member and was a co-founder of the International Pharmaceutical and Medical Device Privacy Consortium. IAF is exploring a partnership with IAPP on best practices for accountability tools.
• IPG/KinessominorStrategic or Co-development PartnerThe IAF partnered with IPG on the Digital University project, with IPG providing particular expertise and depth in critical subject matter areas. Sheila Colclasure, Global Chief Digital Responsibility and Public Policy Officer at IPG/Kinesso, serves on the IAF advisory board.
• PwC (PricewaterhouseCoopers)minorStrategic or Co-development PartnerIn 2021, IAF and PwC jointly drafted 'Evolving to an Effective Algorithmic Impact Assessment,' combining IAF's accountability expertise with PwC's consulting capabilities to develop guidance on AI impact assessments.

Scale indicators5 records

Recent moves1 record

Expansion highlights5 records

Direct peers

• Center for Information Policy Leadership (CIPL): CIPL is a global privacy and data protection policy think tank affiliated with Hunton Andrews Kurth, focused on accountability-based frameworks and responsible data use. Operates a near-identical thought-leadership model to IAF and works on overlapping topics including AI governance, risk assessment, and accountability frameworks.
• International Association of Privacy Professionals (IAPP): IAPP is the largest global membership organization for privacy professionals, offering certifications (CIPP, CIPM, CIPT), publications, conferences, and policy engagement. IAF actively partners with IAPP on events and shares a member base (J&J's Scott Taylor sits on IAPP's board). Both organizations serve corporate privacy leaders and engage regulators, making IAPP the most directly comparable peer.
• Privacy International: Privacy International is a UK-based charity conducting research and advocacy on privacy and surveillance issues globally. Comparable as a non-profit policy/advocacy organization focused on data protection, though with a more civil-society and human-rights orientation than IAF's corporate-policy focus.
• Electronic Privacy Information Center (EPIC): EPIC is a public interest research center focused on privacy, civil liberties, and data protection. Comparable to IAF in producing privacy research, policy reports, and engaging with regulatory proceedings — though EPIC leans more advocacy/consumer-rights oriented than IAF's corporate-funder orientation.
• Future of Privacy Forum (FPF): FPF is a non-profit think tank focused on data protection that produces policy guidance, white papers, and frameworks on emerging privacy issues including AI governance. Highly comparable in structure (non-profit think tank), mission (privacy research and policy), and audience (corporate privacy leaders, regulators, academics).

Broad incumbents

• (ISC)²: (ISC)² is a global professional association for cybersecurity professionals offering the CISSP credential and member education. Comparable as a professional membership organization serving governance/security professionals, though focused on cybersecurity rather than data privacy policy.
• ISACA: ISACA is a global professional association for IT governance, risk management, and cybersecurity with credentialing (CISA, CISM, CRISC). Broader scope than IAF but comparable in operating a professional membership model around governance/risk topics and serving corporate compliance leaders.

Others

• OECD AI Policy Observatory: The OECD AI Policy Observatory is a government-backed initiative providing policy analysis and standards on AI governance. IAF is a member of the related OECD expert group on privacy accountability. Comparable as an influential policy platform on AI/data governance, though broader and government-sponsored rather than non-profit think tank.

Regional players

• Centre for Data Ethics and Innovation (UK CDEI): CDEI was a UK government-backed advisory body on data ethics and AI (transitioned in 2023). Comparable in mission (data ethics frameworks, AI governance advice) but government-affiliated and UK-focused; serves a similar convening function between regulators, industry, and academia.

Emerging players

• Open Data Institute (ODI): ODI is a UK-based non-profit focused on data governance, ethics, and responsible data use across sectors. Overlaps with IAF on data governance frameworks but with a broader data-trust and infrastructure scope beyond just privacy. Comparable as a non-profit think tank influencing data policy.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/iaf_org
• LinkedInlinkedin.com/company/the-information-accountability-foundation

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about The Information Accountability Foundation