Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →Illinois Just Made Model Weights a Security Asset. Encryption at Rest Will Not Cover It.
Illinois did not regulate a chatbot. It regulated the file that is the model. In early July 2026, Governor JB Pritzker signed…
AI Audits Are the New Guardrail. The White House Accord Does Not Make Them Real.
September made AI auditing the default answer to a month of incidents.
CALIFORNIA PRIVACY – CPRA SB 923 Is Law: CCPA Deletion Now Covers Third-Party Data, and Email Alone Is Not Enough
California just closed the biggest hole in the CCPA right to delete.
CALIFORNIA PRIVACY – CPRA California Closes the CIPA Pen Register Loophole. The Wiretap Cases Are Still Coming.
California just cut the private right of action out of the most-used theory in website-tracking litigation.
DATA The Real Price of “Fix It Later”: Non-Compliance Now Costs U.S. Businesses $14.8 Million Per Enterprise
When corporate boards talk about data privacy, the conversation almost always lands on risk tolerance.
COMPLIANCE Federal Privacy Legislation in 2026: The 49 Bills Reshaping U.S. Data Privacy Law
The United States still does not have a single comprehensive federal privacy law resembling the GDPR.
Privacy-Enhancing Technologies Are Moving From Theory to Infrastructure
For years, privacy programs have focused largely on controlling what organizations are allowed to collect.
LAW FIRMS Seyed Hosseini Pro Se Privacy Claimant Is Testing an Expanded CIPA and ECPA Demand Playbook
A new demand letter reviewed by Captain Compliance shows a self-represented California claimant,, using a familiar tactic: visit a website, open browser…
Is Your Customer Service Call a Biometric Event? Lowe’s Voiceprint Lawsuit Signals a New BIPA Risk for AI
A routine call to customer service may be becoming something very different under Illinois privacy law.
COMPLIANCE The License Plate Camera Was Never Just Reading Plates.
One roadside Flock unit produced about 1.6 million images in three weeks.
Is Your Customer Service Call a Biometric Event? Lowe’s Voiceprint Lawsuit Signals a New BIPA Risk for AI
A routine call to customer service may be becoming something very different under Illinois privacy law.
The Specialty Was the Sensitive Field. Marketing Sent It Anyway
Doctoralia told investigators the pixels were for internal campaign measurement.