Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
GDPR Google Fonts and GDPR: What the Munich Ruling Requires and How to Self-Host Your Way Out of Exposure
A German website operator lost a GDPR lawsuit over a font. Not a tracking pixel, not an advertising cookie, not a data…
Scalable AI Governance Breaking Past Homegrown AI Governance
Most AI governance programs do not begin with specialized software and become hard to scale safely.
State enforcers are raising the stakes on kids’ and teens’ privacy
While federal children’s privacy legislation remains stalled, state attorneys general are proving they do not need new laws to take meaningful action.
Clearview AI Settlement Overturned as Years of Biometric Privacy Controversies Return to Court
A federal appeals court has overturned the class-action settlement that would have given millions of people a potential financial interest in Clearview…
LAW FIRMS Who Is Robert Bell? Inside the CIPA Wiretapping Demand Letters Targeting Ecommerce Websites
If your business has received a certified letter from an individual named Robert Bell citing violations of California Penal Code §§ 631(a)…
Meta Faces Staggering $1.4 Trillion Penalty Demand in US Youth Safety Trial
In a development that underscores the growing regulatory heat on Big Tech, four US states are seeking a staggering $1.4 trillion (approximately…
DATA Lofty Sues Vivek Shah First in a New Test of California CIPA Website Claims
Most companies that receive a California Invasion of Privacy Act demand letter are placed in a defensive position.
GOVERNANCE RISK AND COMPLIANCE IAB Proposes a Proportionate Framework for Modernizing U.S. Children’s Privacy Law
The Interactive Advertising Bureau (IAB) has entered the heated debate over children’s and teens’ online privacy with a detailed policy blueprint.
GDPR EDPB Orders Belgian Regulator to Hear NOYB Cookie Banner Complaint on the Merits
A Belgian regulator attempted to dismiss a cookie-banner complaint without deciding whether the banner was lawful.
DATA Mozilla Tested Six Period Tracker Apps. Only One Earned a Perfect Privacy Score
Period-tracking applications ask users to record some of the most intimate information a technology company can collect.
AI EU Cloud Sovereignty Framework Compliance
Digital sovereignty has spent years sounding more like a political ambition than a measurable compliance standard.
CALIFORNIA PRIVACY – CPRA Autonation Privacy Case Dismissed But New Ads Show Ongoing Privacy Litigation Risks Your Company Can Protect Against
Autonation just beat a CIPA case based on jurisdiction grounds but constant threats are lurking each and every week with new ads…