Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
DATA Gartner’s First Magic Quadrant for Privacy UX: What It Says and What It Means for Buyers
On October 6, 2026, Gartner published its first Magic Quadrant for Privacy UX, written by analysts Shadrock Roberts, Stefan Dumitrescu and Bernard…
Clark Santoro’s Privacy Lawsuits, Case by Case
Clark Santoro’s name appears in website-privacy litigation involving Bloomberg, Hyundai Motor America, AARP, Waystar and Lulu & Georgia.
GOVERNANCE RISK AND COMPLIANCE What Is a Civil Investigative Demand—and What Can It Reveal About Your Privacy Program?
A civil investigative demand, or CID, is a formal demand for information issued by a government authority under a statute authorizing a…
Voiceprint Lawsuits Put AI Training Permissions Under Scrutiny
Nine related class actions filed in May 2026 challenge the use of Illinois voice professionals’ recordings to develop commercial voice AI.
Your 2027 Audit Readiness Starts This Quarter
As 2026 winds down, one theme has defined privacy, security and AI governance this year: accountability.
DATA DSR Automation at Scale: A Practical Framework for Privacy Teams
Automated submissions, authorized agents and AI-assisted requests are changing the workload around privacy rights.
Cloud services complicate compliance with the EU’s NIS2 Directive and Digital Operational Resilience Act, or DORA.
Consider a hypothetical Monday morning disruption. A financial services company loses access to a SaaS platform used in a critical workflow. The…
The Privacy Risk Between Your Business and Its AI Models
A business may carefully review an AI model provider and still overlook another company handling the same information.
Why the IAB’s MSPA Isn’t the Finish Line
On March 4, 2026, the Interactive Advertising Bureau released the Fifth Amended and Restated Multi-State Privacy Agreement, the most significant rewrite of…
AI Microsoft and NVIDIA Publish Open-Weight AI Risk Guide for Enterprises
Microsoft and NVIDIA have published joint guidance for enterprises using open-weight AI models, with a shared risk taxonomy and an approach to…
Missouri Launches Show Me Your Age App With On-Device ID Checks and Privacy Commitments
Missouri has launched Show Me Your Age, a state-developed application intended to help businesses prevent underage sales of alcohol, tobacco and cannabis.
New Mexico’s Unfair Practices Act and Privacy Claims After the Meta Verdict
New Mexico’s Unfair Practices Act has a private right of action, and a recent high-profile case shows that public statements about data…