Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
CALIFORNIA PRIVACY – CPRA Received a CIPA Demand Letter From Vivek Shah? How Agencies and Brands Should Respond
If you run an agency, you are sitting on both sides of the most aggressive privacy litigation campaign in the country right…
Your Website Changes Faster Than Your Privacy Review
A privacy team can approve a website on Monday and still have a different compliance problem by Friday.
AI AI Chatbot Regulation: How U.S., EU and U.K. Rules Are Taking Shape
AI chatbots are now handling customer complaints, offering health guidance, screening applicants and building personal relationships with users.
Practical AI Governance in Today’s AI Environment
Artificial intelligence governance can no longer be treated as a future policy project.
Italian Garante Hits US Data Broker Lusha with €2 Million Fine and Processing Ban
Italy’s data protection authority, the Garante, has imposed a €2 million fine on Lusha Systems Inc., a United States-based data broker, for…
EU AI Act Enforcement Powers Activate as Rogue Agent Incident Underscores Systemic Risks
The second anniversary of the European Union’s Artificial Intelligence Act is set to unlock significant new supervisory authority for the European Commission…
GDPR EDPB Draft Guidelines on Anonymization and AI Web Scraping Spotlight Re-Identification Risks Amid Digital Omnibus Debates
The European Data Protection Board has opened a public consultation on two closely related draft guidelines that address some of the most…
LAW FIRMS Attorney Anna Goncharova Privacy Demand Letters Signal the Next Wave of California Website Tracking Claims
Businesses have become increasingly familiar with California privacy demand letters alleging violations of the California Invasion of Privacy Act, commonly known as…
What Is Zero Data Retention? ZDR Explained
Every prompt your employees send to an AI model is a disclosure.
GOVERNANCE RISK AND COMPLIANCE How Wrongful Collection Became Privacy Law’s Most Expensive Phrase
Wrongful collection has quietly become one of the most expensive phrases in American privacy law.
Shadow AI and Hidden Subprocessors: The Compliance Blind Spot Putting Organizations at Risk
As organizations race to mature their AI governance programs, a quiet but serious gap is opening between the vendors they trust and…
EU’s Renewed CSAM Scanning Rules Reopen the Debate Over Private-Message Surveillance
The European Union is moving to restore temporary rules that permit certain online communication providers to scan private messages voluntarily for child…