Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →HHS Releases Updated HIPAA Security Guidance: Why Risk Management Is Now the Centerpiece of Compliance
The U.S. Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), has quietly reinforced a critical message…
AI Stanford HAI’s New Privacy Paper Argues Foundation Models Create a Different Class of Data Risk
Stanford’s Institute for Human-Centered Artificial Intelligence has released a timely issue brief on one of the most unsettled questions in AI governance:…
COOKIES The New Frontlines of Digital Litigation: What U.S. Courts, Companies, and Regulators Are Facing Now
The volume of privacy and cybersecurity litigation working its way through U.S.
GOVERNANCE RISK AND COMPLIANCE California’s Cybersecurity Audit Mandate
When the California Privacy Protection Agency finalized its cybersecurity audit regulations in mid-2025, many businesses quietly braced for the paperwork.
CALIFORNIA PRIVACY – CPRA Meta’s Facial Recognition Glasses Warning Shows How Wearable AI Could Reshape Privacy Risk in Public
Meta is facing a serious wave of criticism over reports that it has explored facial recognition features for its AI smart glasses,…
Booking.com Warns Customers of Data Breach Exposing Names, Contact Details, and Reservation Information
Booking.com, one of the world’s largest online travel and accommodation platforms, has notified affected customers of a data breach in which unauthorized…
GDPR Tracking Pixels in Emails: France’s CNIL Publishes Final Recommendations to Better Protect Privacy
On April 14, 2026, the French data protection authority (CNIL) released the final version of its recommendations on the use of tracking…
DATA Governors in Virginia and Kentucky Enact Amendments Strengthening Comprehensive Privacy Laws
In a continued push to refine state-level consumer data protections, two Democratic governors recently signed targeted amendments to their states’ comprehensive privacy…
DATA Alabama Set to Add Variation to U.S. State Privacy Patchwork with Comprehensive Personal Data Protection Act
Alabama is on track to become the 21st U.S. state with a comprehensive consumer data privacy law after the state legislature unanimously…
COOKIES Does My Site Use Cookies?
Quick Answer: Almost certainly yes — if your website uses Google Analytics, social media buttons, embedded videos, a CMS like WordPress, or any third-party…
COMPLIANCE OneTrust Alternatives: Are There Better Options for You?
Captain Compliance has built its reputation on pairing full privacy-program integration with active legal defense — helping businesses resolve consent and tracking-related…
GDPR GDPR Article 27: EU Representative, UK Representative and DPO Compliance Guide
If your business collects, stores, or processes personal data belonging to people in the European Union or the United Kingdom — but…