Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
GDPR CNIL Urges DPOs to Produce Activity Reports: A Practical Tool for Driving Compliance
After several years as a DPO, I’ve learned that one of the most useful things you can do is put together a…
DATA 140 Million Messages and a Court Order: What the Talkspace Case Reveals About the Architecture of Mental Health Privacy
The investigation Proof News published this week is the kind of story compliance teams should read carefully, set aside, and then read…
CALIFORNIA PRIVACY – CPRA DROP Act Automation Software for Subject Rights Requests
On August 1, 2026, the operational reality of consumer privacy in California changes for every data broker registered with the state and…
GDPR GDPR at 10: The Law That Rewrote the Internet’s Rulebook — and What Comes Next
Ten years ago this week, on 27 April 2016, the European Parliament and Council put their signatures on Regulation (EU) 2016/679 —…
RTM v Bonne Terre: The Court of Appeal Restores the Objective Consent Test — and Saves UK Direct Marketing From a Mind-Reading Standard
For roughly fifteen months, every UK marketer, gambling operator, and cookie-banner reviewer who paid attention to the RTM v Bonne Terre litigation…
New Obstacles for Health Care: Federal and State Rules Tighten Grip on Health and Genomic Data
As a privacy officer working with life sciences and health care clients, I’ve watched the compliance burden shift from HIPAA-centric concerns to…
Australia’s Two Watchdogs Just Decided to Hunt Together
There is a tendency in policy circles to treat privacy and online safety as separate disciplines — parallel tracks running toward similar…
MIT AI Risk Navigator: A Comprehensive Interactive Platform for Mapping and Managing AI Risks
The MIT AI Risk Navigator (airi-navigator.com) is a groundbreaking interactive web tool that unifies multiple datasets from the MIT AI Risk Initiative…
LAW FIRMS Swigart Law Group’s Pen Register Strategy: Is Your Website’s IP Address Collection a Legal Liability?
Most businesses do not give a second thought to Google Analytics.
CALIFORNIA PRIVACY – CPRA The Law Is Clear. The Companies Knew. They Ignored It Anyway.
There is a particular kind of corporate lawbreaking that is, in some ways, more troubling than the brazen kind.
GDPR Email Tracking Pixels Are Now a Frontline Privacy Risk
Inside Italy’s Crackdown on Invisible Email Surveillance For years, tracking pixels embedded in emails operated in a legal gray area—quietly collecting behavioral…
DATA South Korea Is Rewriting the Rules on Data Use — And the Privacy World Should Be Paying Attention
Few things in privacy law are more seductive, or more dangerous, than elegant legal engineering.