Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →AI’s Agentic Leap: Why Governance Is Racing to Catch Up
Artificial intelligence is no longer just advancing it is leaping into new territory with autonomous, agentic systems that can plan, act, and…
AI OpenAI’s Restricted-Access Cybersecurity Model: A Strategic Shift Toward Guarded Capability
OpenAI’s recent announcement of a restricted-access cybersecurity-focused model marks a notable inflection point in how advanced AI capabilities are being deployed.
LAW FIRMS Crate & Barrel Hit with Privacy Claims Over Website Tracking: What the Lawsuit Signals for Every Online Retailer
You may have seen this ad and yet another warning about the rise in privacy lawsuits and by using Captain Compliance’s software…
Purpose Limitation and Data Minimization in Agentic AI: What GDPR Compliance Actually Requires
Agentic systems don’t just respond to prompts — they pursue objectives across multiple data sources, APIs, and sessions.
AI Guardrails Give Governance Teams a False Sense of Security
Here’s What They’re Missing The most widely deployed AI safety mechanism in enterprise settings today was never designed to manage legal risk.
McGraw Hill Data Breach 2026: The $10 Billion Governance Gap in Salesforce Security
We have covered a lot on EdTech privacy lawsuits and how they can be avoided if you want to protect against regulatory…
GOVERNANCE RISK AND COMPLIANCE Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
A compromised third-party AI tool, an over-permissioned OAuth grant, and an employee’s Google Workspace account were all it took to pull one…
AI xAI v. Bonta: Why This Constitutional Showdown Over AI Training Data Is About Much More Than One Company
Elon Musk’s AI company is suing California’s Attorney General over a law requiring disclosure of AI training data.
EDITORIAL The EU Just Rewrote What “Personal Data” Means — And Your Organization Needs a New Kind of Document to Prove It
The Digital Omnibus doesn’t lower the bar on data protection.
LAW FIRMS Kazerouni Law Group and the Rise of CIPA Lawsuits
Over the past two years, few names have surfaced more frequently in California privacy litigation than Kazerouni Law Group, APC.
Kind Law: How Session Replay Software and Meta Pixel Are Fueling a New Wave of Digital Wiretapping Lawsuits
Session replay software was designed to help UX teams understand how users navigate websites—recording mouse movements, clicks, scrolls, and form interactions to…
LAW FIRMS Pacific Trial Attorneys and CIPA Chat Wiretapping
Your website’s live chat feature may be the single biggest unaddressed CIPA liability in your business.