Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →No, the Supreme Court Did Not Just Kill the EU-U.S. Data Privacy Framework
Within hours of the U.S. Supreme Court’s June 29, 2026 decision in Trump v. Slaughter — which struck down the for-cause removal…
EU AI Act Compliance for U.S. Companies
A lot of U.S. companies are going to misunderstand the EU AI Act until it is too late. They will assume it…
LAW FIRMS Orellana v. OneTrust LLC – Complaint for Invasion of Privacy
Orellana v. OneTrust LLC – Complaint for Invasion of Privacy Case: Lucas Orellana v. OneTrust LLC, a Delaware limited liability company, d/b/a…
CALIFORNIA PRIVACY – CPRA CIPA Lawsuit Abuse: Why California’s Wiretap Law Is Still a Mess and the Legislative Battle to Fix It
The California Invasion of Privacy Act (CIPA) was passed in 1967.
AI in Employment Decisions: Hiring, Promotion, Bias Audits, and State Law Risk
Artificial intelligence is already inside the employment process.
ComplyAuto vs. ComplyNet: A Dealer’s Guide to Choosing a Compliance Platform
The Dealership Compliance Software Landscape Auto dealerships operate in one of the most regulatory-dense environments in American business.
AI AI Vendor Due Diligence Checklist: What Companies Need to Ask Before Buying AI Software
Most companies will not build every AI system they use. They will buy it. They will subscribe to it. They will turn…
Roku’s $25 Million Florida Settlement Signals the Rising Wrath of State AG Privacy Enforcement on Children’s Data
What the landmark resolution with Attorney General James Uthmeier reveals about the new era of aggressive, multi-state scrutiny on streaming platforms, data…
UK DUAA Complaints Requirements Are Now in Force
The U.K.’s Data (Use and Access) Act has officially moved another privacy compliance obligation from best practice to legal requirement.
PIA vs DPIA
Privacy impact assessments are one of the most misunderstood compliance obligations in data protection law.
CALIFORNIA PRIVACY – CPRA U.S. Consumer Privacy Rights Enforcement: What Regulators Are Targeting
For years, the United States privacy enforcement landscape was characterized more by its gaps than its reach.
GDPR Article 27 EU Representative: Requirements, Enforcement, and Compliance Steps for Non-EU Companies
For the better part of a decade, the EU representative requirement under Article 27 of the General Data Protection Regulation was treated…