Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
THIRD PARTY RISK MANAGEMENT Britain Will Ask Who Pays When Insecure Software Gets Breached. Vendors Have a Year to Answer
For years, the British approach to insecure software has been to ask nicely.
COMPLIANCE Ofcom Says Age Checks at 16 Can Work. Its Own Assessment Shows What They Will Cost
If the UK goes ahead with a social media ban for under-16s, platforms will need a reliable way to tell a 15-year-old…
DATA The OECD Built a Catalogue of Privacy-Enhancing Technologies. Here Is How to Use It Without Overrating It
The OECD has launched a Global Repository for Privacy-Enhancing Technologies, a public toolkit meant to help organizations pick a privacy-enhancing technology (PET)…
AI New York’s New Chatbot Law for Minors: The Banned Features, the Age Checks and the Model-Deletion Remedy
New York has a new law on what AI chatbots may say to children.
DATA The FTC Wants to See the Math: What Its Nine Personalized Pricing Orders Ask Delta, Uber, Walmart and Others
The Federal Trade Commission sent nine companies a set of questions on October 28, 2026, and every one of them goes to…
AI The UK Uses AI to Summarize Asylum Interviews. A Watchdog May Now Look at How Well It Works
The UK’s borders watchdog is weighing whether to inspect how the Home Office uses generative AI to help decide asylum claims.
GOVERNANCE RISK AND COMPLIANCE Most K-12 Districts Had a Cyber Incident This Year, and Two-Thirds Defend With One or Two People
Most K-12 schools and districts in the United States had a cybersecurity incident in the past year, and most of them are…
GOVERNANCE RISK AND COMPLIANCE Norway Raises Its National Cyber Risk Level to High and Tells Every Organization What to Fix
Norway’s National Security Authority (NSM) has raised the national cyber risk level to “high” and, for the first time, published that assessment…
GOVERNANCE RISK AND COMPLIANCE NIST Finalizes Its Post-Quantum Road Map. Privacy Teams Hold the Map It Needs
The National Institute of Standards and Technology has finalized its road map for moving the United States off encryption that a future…
AI Sweden’s Government Offices Block ChatGPT and Claude. The Real Issue Is the Missing Contract
Since Monday, October 26, staff at the Government Offices of Sweden can no longer open ChatGPT or Claude on their work computers.
AI Norway’s Privacy Regulator Warns of ‘Digital Ghosts’: AI Agents That Outlive the People Who Built Them
An employee builds a small automation. An AI agent checks a case management system every morning, pulls new records, drafts summaries and…
DATA Your Doctor Didn’t Share Your Diagnosis. Your Phone’s Location Did
A patient sits in an oncologist’s waiting room. Her phone, which has location services switched on for a weather app and a…