Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
AI AI Governance Framework: How to Align with the EU AI Act, NIST AI RMF, and State AI Laws
Artificial intelligence is already inside your business. It may not be approved. It may not be documented. It may not be reviewed…
Meta Left Employee Keystroke Data Exposed Company-Wide After Internal AI Training Program Raised Alarm
Meta built a program to watch its own employees. Then it failed to watch the program.
DATA Canada’s Bill C-36 Overhauls Private-Sector Privacy Law
New Enforcement Agency, GDPR-Scale Penalties, and Obligations That Will Reshape How Organizations Handle Personal Data Canada has introduced the most significant overhaul…
LAW FIRMS One Medical Data Breach Privacy Risks
Ads like the one below are popping up online and are similar to the other ads we warned about like the Cargurus,…
LAW FIRMS What Is DataPrivacyJustice.com? A Warning and a Breakdown of the Law Firm Behind It
Source: DataPrivacyJustice.com — Open Class Actions. Attorney Advertising for New York-licensed attorney Adam Harris, 60 Broad Street, 29th Floor, New York, NY…
AI Shadow AI Is a GLBA Safeguards Rule Problem
If you work at a financial institution you will want to get your privacy compliance and AI governance posture in place because…
AI Scribes in Mental Health Care: Consent Theater, HIPAA Gaps, and the Privacy Crisis Hiding in Plain Sight
There is a recording device in your therapist’s office.
Privacy Regulation in the Age of AI: Experts Call for Radical Shift from Consent to Institutional Accountability
In March of this year, Carnegie Mellon University’s Block Center for Technology and Society convened a group of interdisciplinary experts to grapple…
Anonymization Is Not a Safe Harbor Anymore: AI Has Changed the Math on De-Identified Data
For decades, anonymization functioned as the foundational legal assumption of the data economy.
Italy Fines Emirates €180,000 for Mishandling Passenger Health Data
Italy’s data protection authority has imposed a €180,000 ($208,890) fine on Emirates Airline for breaches involving the processing of sensitive health data…
IAB Diligence Platform Launches in Germany, Offering Pan-European GDPR Vendor Assessment Framework
The Interactive Advertising Bureau is taking its vendor diligence infrastructure global.
DATA Privacy Risk Scanning Tools Comparison
Privacy risk scanning has become a distinct software and much welcomed category recently, driven by the same forces reshaping the broader privacy…