Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →EY Data Breach Highlights Third-Party Risk
Ernst & Young (EY), one of the world’s Big Four professional services firms and a major player in privacy and cybersecurity consulting,…
LAW FIRMS Vivek Shah Declared Vexatious Litigant – Did You Get a Demand Letter?
Just two days after a significant federal court ruling, the landscape of California Invasion of Privacy Act (CIPA) litigation continues to shift.
GDPR CNIL Tracking Pixels FAQ
France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), has published a comprehensive FAQ clarifying its recommendations on…
State Attorneys General Are Turning Cybersecurity Failures Into Enforcement Cases
For years, many companies treated cybersecurity as primarily a technical responsibility.
The Real Reason Your Third-Party Risk Program Falls Short
Most organizations have purchased a tool they were sure they needed.
Why Every Business Website Needs a Privacy Notice And How to Make Yours Compliant
Building or updating a business website involves hundreds of decisions.
Unfair Competition Law Data Privacy Lawsuits
California’s Unfair Competition Law (Business & Professions Code § 17200), commonly known as the UCL, has become one of the most powerful…
CALIFORNIA PRIVACY – CPRA Ace Hardware Broken Consent Banner Privacy Case Expands Damages Beyond $5,000
We have screamed at the top of our virtual lungs about the risks of having a broken cookie banner and having to…
COMPLIANCE Federal Court Declares Serial CIPA Litigant Vivek Shah a Vexatious Litigant
In a landmark development for companies navigating the surge of privacy-related demand letters and lawsuits, the U.S.
DATA IAB charts a pragmatic path for modernizing children’s privacy law
The Interactive Advertising Bureau’s new white paper, Protecting America’s Youth: A Balanced Framework for Modernizing Children’s Privacy Law, offers something increasingly rare…
CIPA Website Tracking Lawsuits: What a ‘Pen Register’ Claim Is, Who’s Being Sued, and How to Defend Your Website
A statute written in 1967 to stop people from clipping alligator leads onto telephone lines is now the busiest privacy litigation engine…
COOKIES What Is Consent Orchestration?
A visitor clicks “Do Not Sell or Share My Personal Information” on your website.