Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →Herbert Smith Freehills Kramer, Goodwin Procter, Blank Rome and More Disclose Data Breaches as Law Firm Cyberattacks Continue
At least three major law firms—Herbert Smith Freehills Kramer, Goodwin Procter, and Stettinius & Hollister—disclosed data breaches to U.S.
AI How to Build an Annual AI Audit Plan That Actually Works
Many internal audit functions still treat artificial intelligence as a single line item on the annual plan.
AI Closing the AI Audit Gap: How to Translate NIST, AIUC-1, and OWASP into Action
Internal audit teams are not short on frameworks for artificial intelligence.
GOVERNANCE RISK AND COMPLIANCE Consumer Reports Finds Major Crypto Exchanges Fall Short on Privacy, Transparency, and Risk Disclosure
Consumer Reports has released a multi-month evaluation of five major U.S.-facing cryptocurrency exchanges—Binance.US, Coinbase, Crypto.com, Gemini, and Kraken—concluding that the platforms make…
Senate HELP Committee Advances Bill Extending HIPAA-Style Protections to Consumer Health Data and Wearables
The Senate Committee on Health, Education, Labor and Pensions voted 22-0 to advance an amended version of the Health Information Privacy Reform…
Inside CalPrivacy’s Expanding Audit Function: How the Agency Plans to Examine Privacy Practices Beyond Traditional Enforcement
Since its creation in 2020, the California Privacy Protection Agency has primarily drawn public attention through high-profile enforcement actions and successive rounds…
Senate Commerce Committee Advances KOSA and Children’s AI Safety Bills
The U.S. Senate Committee on Commerce, Science, and Transportation voted on 5 August 2026 to advance a package of children’s online safety…
Australian Privacy Commissioner Flags Growing Risks from Consumer Smart Glasses and Calls for Privacy Act Updates
Australia’s Privacy Commissioner Carly Kind has publicly raised concerns about the rapid arrival of consumer smart glasses and other surveillance wearables, warning…
AI NAI Releases Practical ‘Dos and Don’ts’ Guidance for AI and Agentic Workflows in Adtech
Advertising technology companies have spent more than a decade refining machine learning models, predictive optimization engines, and automated bidding systems.
When the Cookie Banner Becomes Exhibit A: Why the Millisecond Is Relevant in CIPA Litigation
We warned about the California Invasion of Privacy Act (CIPA) cookie banner cases and now the entire privacy and legal community is…
The AI Audit Illusion
By any superficial metric, corporate America’s response to artificial intelligence appears disciplined, proactive, and fully funded.
COMPLIANCE The Compliance Gap Between HIPAA, GLBA, and State Privacy Law
A hospital runs a public webinar on heart health. Registrants who are not patients submit their name, email, and employer. A regional…