Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
GOVERNANCE RISK AND COMPLIANCE Hidden Opt-Out Pages and Massive Breaches: The $21 Billion Data Broker Problem
When you hear the words “data broker,” it probably doesn’t sound like something that could empty your bank account or wreck your…
DATA Reddit Fined £14.47 Million for Children’s Privacy Failures
Reddit has been hit with a £14.47 million fine by UK regulator Ofcom for failing to adequately protect children’s personal data.
AI 61 Privacy Regulators vs. Synthetic Reality Warning on AI-Generated Imagery
A coalition of 61 privacy and data protection authorities released a joint statement that reads less like a policy memo and more…
AI Your AI Just Bought Something. Now What? The Legal and Privacy Minefield of Agentic Commerce
Picture this: You wake up on a Tuesday morning, check your email, and find three order confirmation receipts for items you have…
GDPR France’s CNIL Launches “PANAME” Project to Audit AI Models for GDPR Compliance
France’s data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), has opened a new phase of its PANAME project…
COMPLIANCE OAIC Overhauls Privacy Complaint Handling: Australia’s New Enforcement-First Approach
Australia’s privacy regulator is resetting expectations for how individual privacy complaints will be handled — and the message is blunt: the Office…
CALIFORNIA PRIVACY – CPRA California Privacy Authority Backs Groundbreaking Privacy Whistleblower Protection Bill
In a major development for privacy enforcement, the California Privacy Protection Agency (CalPrivacy) has thrown its weight behind a first-of-its-kind whistleblower protection…
GDPR UK Court of Appeal: GDPR-Style Security Duties Don’t Disappear Just Because Stolen Data Is “Anonymous” to Hackers
The U.K.
GDPR The Council Just Deleted the Most Consequential Sentence in GDPR History — And What Happens Next Will Define European Privacy for a Generation
There is a paragraph that the European Commission spent years building a legal case for, that the technology industry spent years lobbying…
The Kochava Privacy Litigation Case Is Finally Settled
It took nearly four years, two complaints, a motion to dismiss, a judge’s reversal, a class action, and a settlement that preceded…
CALIFORNIA PRIVACY – CPRA California AB 1159: A Landmark Student Privacy Bill That Fixes the Past While Struggling to Catch the Present
California has a well-earned reputation as America’s de facto privacy regulator.
DATA When Does Health Data Become Sensitive? The NAI’s Five-Factor Test Has Answers
The Five-Factor Test That Could Save Your Health Advertising Program — Or Expose It There is a question sitting at the center…