Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
GDPR ePrivacy Directive Updates
In March 2025, Spain’s data protection authority (AEPD) fined a major telecommunications provider €3.94 million for placing tracking cookies without valid consent…
COOKIES Mouseflow mf_user Cookie
Mouseflow is a web analytics platform that provides behavior tracking tools designed to help website owners understand how visitors interact with their…
Can We Teach AI Agents to Respect Human Rights Before They Act?
As AI systems move from answering questions to taking actions—booking travel, filing patents, managing workflows, or coordinating across tools—the gap between abstract…
Police Misuse of Flock License-Plate Networks Highlights Persistent Privacy Gaps in Automated Surveillance
A Washington Post investigation published in early August 2026 has documented widespread misuse of Flock Safety’s nationwide network of automated license-plate readers…
What Is the ADS_VISITOR_ID Cookie?
If a cookie scan of your website surfaced a cookie named ADS_VISITOR_ID and you are trying to figure out what it does,…
AI EU AI Act Enforcement Begins
There are some key aspects of the EU AI Act. that are now being enforced. The European Union’s Artificial Intelligence Act has…
CALIFORNIA PRIVACY – CPRA Vivek Shah CIPA Demand Letters: Inside the Court-Declared Vexatious Litigant’s Website Wiretapping Claims
Vivek Shah is no longer merely a “serial plaintiff” in the vocabulary of defense lawyers and demand-letter recipients.
CALIFORNIA PRIVACY – CPRA Received a CIPA Demand Letter From Vivek Shah? How Agencies and Brands Should Respond
If you run an agency, you are sitting on both sides of the most aggressive privacy litigation campaign in the country right…
Your Website Changes Faster Than Your Privacy Review
A privacy team can approve a website on Monday and still have a different compliance problem by Friday.
AI AI Chatbot Regulation: How U.S., EU and U.K. Rules Are Taking Shape
AI chatbots are now handling customer complaints, offering health guidance, screening applicants and building personal relationships with users.
Practical AI Governance in Today’s AI Environment
Artificial intelligence governance can no longer be treated as a future policy project.
Italian Garante Hits US Data Broker Lusha with €2 Million Fine and Processing Ban
Italy’s data protection authority, the Garante, has imposed a €2 million fine on Lusha Systems Inc., a United States-based data broker, for…