Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
GDPR The ICO’s New Interactive Tool for International Data Transfers
Cross-border data transfers have long been one of the most complicated areas of modern privacy law.
DATA No More “We’ll Fix It Later”: Turning Privacy by Design into Everyday Architecture
Procrastination is the most expensive cost in privacy for our audience.
The Homebuyers Privacy Protection Act
The Homebuyers Privacy Protection Act (H.R. 2808, Public Law 119-36) was signed into law on September 5, 2025, and took full effect…
The Supreme Court’s Silence on AI Copyright Signals a Defining Moment for Creativity and Intellectual Property
The rapid rise of generative artificial intelligence has forced courts, lawmakers, and regulators to confront a difficult question: who owns content created…
COOKIES Cookie Warning Notice
The era of the “static banner” has largely faded, replaced by highly personalized, AI-driven privacy interfaces.
CALIFORNIA PRIVACY – CPRA Prom Night, Football Games, and Your Data: The PlayOn Privacy Wake-Up Call
“Students trying to go to prom or a high school football game shouldn’t have to leave their privacy rights at the door.”…
GOVERNANCE RISK AND COMPLIANCE Hidden Opt-Out Pages and Massive Breaches: The $21 Billion Data Broker Problem
When you hear the words “data broker,” it probably doesn’t sound like something that could empty your bank account or wreck your…
DATA Reddit Fined £14.47 Million for Children’s Privacy Failures
Reddit has been hit with a £14.47 million fine by UK regulator Ofcom for failing to adequately protect children’s personal data.
AI 61 Privacy Regulators vs. Synthetic Reality Warning on AI-Generated Imagery
A coalition of 61 privacy and data protection authorities released a joint statement that reads less like a policy memo and more…
AI Your AI Just Bought Something. Now What? The Legal and Privacy Minefield of Agentic Commerce
Picture this: You wake up on a Tuesday morning, check your email, and find three order confirmation receipts for items you have…
GDPR France’s CNIL Launches “PANAME” Project to Audit AI Models for GDPR Compliance
France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), has opened a new phase of its PANAME project…
COMPLIANCE OAIC Overhauls Privacy Complaint Handling: Australia’s New Enforcement-First Approach
Australia’s privacy regulator is resetting expectations for how individual privacy complaints will be handled — and the message is blunt: the Office…