Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
AI Why Privacy Teams Are Central to Effective AI Governance
As organizations scale AI deployment, a key governance gap has become clear: AI governance is too often treated as a technology problem,…
GOVERNANCE RISK AND COMPLIANCE Kentucky Attorney General Files First Enforcement Action Under New Consumer Data Privacy Law
Well that didn’t take very long with the new law passed on January 1st.
The Grok Deepfake Crisis: A Biometric Privacy Disaster That Regulators Missed
When Ofcom launched its investigation into X under the UK’s Online Safety Act over Grok’s image generation capabilities, the headlines focused on…
CALIFORNIA PRIVACY – CPRA CalPrivacy Cracks Down on Data Broker Datamasters
CalPrivacy is cracking down just as we promised with another fine but this time it’s against a data broker for a DROP…
AI Bringing Trustworthy AI into the Doctor’s Office
The way health care is delivered is changing fast, and artificial intelligence is increasingly part of that transformation.
Why Some Health Data Deserves Extra Protection
In conversations among privacy professionals, regulators, and healthcare technologists, one theme is becoming clearer: not all health data is created equal.
CALIFORNIA PRIVACY – CPRA Atheria Law: Legal Guardians of Cyber and Privacy Risk for the Global Insurance Industry
In a world where data breaches, privacy litigation, and technology risk are both ubiquitous and costly, Atheria Law has carved out a…
The Kentucky Consumer Data Protection Act (KCDPA): A Comprehensive Analysis
The KCDPA became effective on January 1, 2026, with data protection impact assessment requirements applying prospectively to processing activities initiated or generated…
The Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA): A Comprehensive Analysis
The RIDTPPA became effective on January 1, 2026, with data protection assessment requirements applying prospectively to processing activities initiated on or after…
COMPLIANCE The Indiana Consumer Data Privacy Act (ICDPA): A Comprehensive Analysis
The ICDPA became effective on January 1, 2026. This in-depth guide examines the full text of Indiana Code Title 24, Article 15,…
COMPLIANCE Michigans Preservation of Personal Privacy Act
When Michigan enacted Act 378 of 1988, the digital streaming revolution was still decades away.
GOVERNANCE RISK AND COMPLIANCE Bursor & Fisher’s Data Privacy Class Actions
Data privacy litigation is no longer a niche corner of consumer law.