Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →Where There’s Smoke: Hinton v. Planned Parenthood and the “Linkage” Proof Gap in CIPA Pixel Class Actions
For more than three years, plaintiffs have filed California Invasion of Privacy Act (CIPA) claims against nearly every type of organization with…
Apex Trial Law and Ryan M. Ferrell: Consumer Privacy Demand Letters
If your business has received a demand letter from Apex Trial Law, you are not alone.
DATA Privisy Review: What It Is, How It Works, and What It Costs
Most companies that worry about the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), eventually install…
AI Governance: Know What Your AI Does, Who Approved It, and What Data It Uses
Your marketing team uses AI to write campaigns. Customer service has an AI chatbot. HR is evaluating a tool that ranks applicants.…
DATA Can You Sell Your Company’s Data to Train Frontier AI? The Privacy Risks Behind the New Enterprise Data Market
The cleanest legal answer sounds simple: if information is truly anonymous, privacy law generally stops treating it as personal data.
DHS Watchdog: Most Civilian Agencies Missed CISA’s Cloud Security Order, and CISA Cannot Make Them Comply
The Department of Homeland Security Office of Inspector General says most federal civilian agencies missed the cloud-security rules CISA told them to…
Maryland’s AI Framework Is a Legislative Agenda, Not a Principles Poster
Governor Wes Moore published an AI framework on September 22 built around three lines: protect residents, give workers a voice, and keep…
Your AI Agent Is Still Your Problem: The FTC’s Message to Businesses Deploying Autonomous AI
AI agents can browse websites, send emails, modify files, query databases, interact with customers, call APIs and increasingly perform work without waiting…
Illinois Just Made Model Weights a Security Asset. Encryption at Rest Will Not Cover It.
Illinois did not regulate a chatbot. It regulated the file that is the model. In early July 2026, Governor JB Pritzker signed…
AI Audits Are the New Guardrail. The White House Accord Does Not Make Them Real.
September made AI auditing the default answer to a month of incidents.
CALIFORNIA PRIVACY – CPRA SB 923 Is Law: CCPA Deletion Now Covers Third-Party Data, and Email Alone Is Not Enough
California just closed the biggest hole in the CCPA right to delete.
CALIFORNIA PRIVACY – CPRA California Closes the CIPA Pen Register Loophole. The Wiretap Cases Are Still Coming.
California just cut the private right of action out of the most-used theory in website-tracking litigation.