Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
AI The New Rules of AI Governance: Why Traditional Models Can’t Keep Up
AI has moved from “innovation lab” curiosity to production-grade infrastructure.
DATA Why Consent Is Structurally Failing in the Age of Privacy and Artificial Intelligence
For decades, consent has functioned as the legal and ethical linchpin of data protection.
AI When the Platform Is the Pipeline: What the Nvidia-YouTube Lawsuit Tells Us About AI’s Data Problem
There is a phrase that keeps appearing in AI litigation that I think deserves more attention than it usually gets: “without consent.”…
The Imgur Fine: A Wake-Up Call for the “Children’s Code” Era
This month, the UK Information Commissioner’s Office (ICO) issued a significant financial penalty that has sent ripples through the digital media landscape.
Cookie Chimp How To Handle Consent Management
Let’s be honest. Nobody has ever looked at a cookie consent banner and thought, “wow, I’m really glad that’s here.” Users find…
Did Ofcom Fine a Porn Company for Failing Age Checks?
Short answer is Yes. Last week on February 12, 2026, Ofcom fined Kick Online Entertainment SA £800,000 for failing to implement legally…
Can Luxembourg’s Data Protection Authority Bring GDPR Class-Action Lawsuits?
Yes. Luxembourg’s National Commission for Data Protection (CNPD) is now a qualified entity authorized to bring class-action litigation on behalf of consumers…
Europe’s Ongoing Push to Combat Explicit Deepfakes and CSAM
Europe is moving from “policy concern” to “operational enforcement” on explicit deepfakes and child sexual abuse material (CSAM).
AI Governance 2.0: Why Having a Policy Is Not the Same as Being Protected
In 1903, the Wright brothers flew 120 feet at Kitty Hawk. By 1929, commercial aviation was booming and terrifying in equal measure:…
GOVERNANCE RISK AND COMPLIANCE Nevada’s Statewide Data Classification Policy: The Privacy Governance Layer States Have Been Missing
When a state can’t agree on what “sensitive” means, security controls become guesswork.
The HIPAA Mirage: Why Your AI “Doctor” Isn’t Legally Bound to Protect You
The rapid integration of Artificial Intelligence into the healthcare sector has created a gold rush of convenience.
GDPR Understanding the ICO’s Codes of Conduct: A Guide for Organisations
The Information Commissioner’s Office (ICO) in the UK promotes codes of conduct as voluntary accountability tools under UK data protection law.