Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →Custodio & Dubey – Tracking-Pixel Litigators
There is a specific Los Angeles plaintiff firm that, more than any other single name in the US privacy bar, illustrates how…
GOVERNANCE RISK AND COMPLIANCE Michigan Social Security Number Privacy Act
The Michigan Social Security Number Privacy Act (SSNPA), enacted as Public Act 454 of 2004 and codified at MCL 445.81 et seq.,…
COOKIES The Google Setting That’s Been Quietly Protecting Your Privacy Posture Is About to Stop Working
In roughly seven weeks, on June 15th 2026, Google will quietly remove one of the most widely relied-upon privacy guardrails in the…
The Privacy Program Assessment, Done Properly: A Practical Guide for In-House Leaders
Almost every mature privacy program runs a periodic Privacy Program Assessment.
CALIFORNIA PRIVACY – CPRA Meta’s Plan to Train AI on Employee Activity: A New Frontier in Workplace Surveillance
Meta’s reported plan to deploy internal tracking software capable of recording mouse movements, clicks, keystrokes, and even screenshots of employee devices marks…
Supreme Court Takes Up FCC Privacy Enforcement: A Defining Moment for Data Accountability in the U.S.
The United States Supreme Court’s recent oral arguments in the high-stakes dispute between the Federal Communications Commission (FCC) and telecom giants AT&T…
GDPR CNIL Urges DPOs to Produce Activity Reports: A Practical Tool for Driving Compliance
After several years as a DPO, I’ve learned that one of the most useful things you can do is put together a…
DATA 140 Million Messages and a Court Order: What the Talkspace Case Reveals About the Architecture of Mental Health Privacy
The investigation Proof News published this week is the kind of story compliance teams should read carefully, set aside, and then read…
CALIFORNIA PRIVACY – CPRA DROP Act Automation Software for Subject Rights Requests
On August 1, 2026, the operational reality of consumer privacy in California changes for every data broker registered with the state and…
GDPR GDPR at 10: The Law That Rewrote the Internet’s Rulebook — and What Comes Next
Ten years ago this week, on 27 April 2016, the European Parliament and Council put their signatures on Regulation (EU) 2016/679 —…
RTM v Bonne Terre: The Court of Appeal Restores the Objective Consent Test — and Saves UK Direct Marketing From a Mind-Reading Standard
For roughly fifteen months, every UK marketer, gambling operator, and cookie-banner reviewer who paid attention to the RTM v Bonne Terre litigation…
New Obstacles for Health Care: Federal and State Rules Tighten Grip on Health and Genomic Data
As a privacy officer working with life sciences and health care clients, I’ve watched the compliance burden shift from HIPAA-centric concerns to…