Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
GDPR The ICO Reframes International Data Transfers
What the Updated UK GDPR Guidance Means for Organisations The UK Information Commissioner’s Office (ICO) has signaled a meaningful evolution in how…
AI Governments Move to Criminalize Nonconsensual Deepfakes as Pressure Mounts on Generative AI Platforms
The global response to nonconsensual sexually explicit deepfakes has entered a new phase, especially after we broke the news about Grok’s deepfake…
CALIFORNIA PRIVACY – CPRA California Unveils First-of-Its-Kind Privacy Tool to Block Sale of Personal Data: A New Era of Consumer Control
On January 20, 2026, California Governor Gavin Newsom and the California Privacy Protection Agency unveiled a groundbreaking digital privacy initiative that represents…
DATA The $47.5 Million Kaiser Permanente Privacy Settlement: What It Alleges, Who May Be Eligible, and Why “Tracking Pixels” Have Become Healthcare’s Biggest Digital Risk
A major class-action settlement involving Kaiser Permanente is putting a bright spotlight on a reality that many patients and health-plan members still…
AI Job Seekers Versus the Algorithm: The Lawsuit That Could Force Open the Black Box of AI Hiring
For millions of job seekers, the modern hiring process feels less like a conversation and more like a silent verdict.
Beyond HIPAA: EPIC’s Blueprint for Confronting the Health Data Privacy Crisis
A deep dive into the Electronic Privacy Information Center’s landmark report on reimagining health data protections for equity and trust This analysis…
AI Why Chatbot Privacy Demands Immediate Attention
Generative AI chatbots embody a fundamental conflict: the drive for ever-deeper personalization often comes at the direct expense of user privacy.
COMPLIANCE Online School Has to deal with VPPA Litigation
While no clients of Captain Compliance have had to deal with a VPPA lawsuit once they started to use our software a…
Privacy Alert Jane Doe v Eating Recovery Center CIPA Lawsuit
We continue to report on privacy litigation risks and why you need to be using Captain Compliance if you want to avoid…
Your Data Inventory Is Already Wrong
Let me tell you about Sarah, a privacy manager at a mid-sized fintech company.
COOKIES Cookies and Trackers: How to Manage Consent Across Devices and Across Sites (CNIL Guidance Adapted for Cross-Domain Use)
Users regularly access services through multiple touchpoints: a primary website, related domains (e.g., regional sites), mobile applications, and several devices (desktop, phone,…
AI When Privacy Meets AI: Why Companies Need Integrated Governance Now, Not Later
The convergence of data protection and artificial intelligence demands a unified approach—here’s how to build it When companies first started implementing privacy…