Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →The DPA You Trust May Not Show You the Full AI Picture
A privacy officer signs off on a new SaaS vendor after reviewing its data processing agreement.
CIPA vs CCPA: Understanding the Biggest Privacy Litigation Risk for Websites
It may only look like a CIPA claim can cost you $5,000 in statutory damages but thats not true.
DATA OneTrust Alternatives: 11 Best Competitors Compared for 2026 (In-Depth Guide)
OneTrust is the name most privacy teams think of first.
LAW FIRMS Robert Bell HAR File Demand Letter
Pre-litigation privacy demands under the California Invasion of Privacy Act (CIPA) have evolved from class action threats into high-volume, pro se serial…
NIST, ISO 27701, or Neither? Why Picking a Privacy Framework Is the Wrong First Question
In March 2025, the California Privacy Protection Agency fined American Honda Motor Co.
GDPR ePrivacy Directive Updates
In March 2025, Spain’s data protection authority (AEPD) fined a major telecommunications provider €3.94 million for placing tracking cookies without valid consent…
COOKIES Mouseflow mf_user Cookie
Mouseflow is a web analytics platform that provides behavior tracking tools designed to help website owners understand how visitors interact with their…
Can We Teach AI Agents to Respect Human Rights Before They Act?
As AI systems move from answering questions to taking actions—booking travel, filing patents, managing workflows, or coordinating across tools—the gap between abstract…
Police Misuse of Flock License-Plate Networks Highlights Persistent Privacy Gaps in Automated Surveillance
A Washington Post investigation published in early August 2026 has documented widespread misuse of Flock Safety’s nationwide network of automated license-plate readers…
What Is the ADS_VISITOR_ID Cookie?
If a cookie scan of your website surfaced a cookie named ADS_VISITOR_ID and you are trying to figure out what it does,…
AI EU AI Act Enforcement Begins
There are some key aspects of the EU AI Act. that are now being enforced. The European Union’s Artificial Intelligence Act has…
CALIFORNIA PRIVACY – CPRA Vivek Shah CIPA Demand Letters: Inside the Court-Declared Vexatious Litigant’s Website Wiretapping Claims
Vivek Shah is no longer merely a “serial plaintiff” in the vocabulary of defense lawyers and demand-letter recipients.