Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →
CALIFORNIA PRIVACY – CPRA The Evidence Clock: Why the First CCPA Audit Year Is the One You Can’t Redo
California’s privacy regulator can ask a covered business to hand over its required audit reports and expect an answer within 30 days.
COMPLIANCE The State of Web Privacy: What 200 Insurance Claims Reveal About CIPA Demand Letters and Wrongful Collection
In one of the demands described in Coalition’s State of Web Privacy report, the claimant sought $5,000 in statutory damages for each…
GDPR Explicit GDPR Lawful Basis Statements: What Articles 13 and 14 Require in Your Privacy Notice
In January 2023, Ireland’s Data Protection Commission fined Meta a combined 390 million euros over how Facebook and Instagram handled personal data…
DATA Pennsylvania Firearm Purchase Privacy Lawsuits: The Uniform Firearms Act and Retailer Risk
A firearm retailer can follow its sales procedures, arrange a lawful transfer and still face a privacy lawsuit over what its website…
DATA Minnesota Health Records Act: Patient Privacy, Tracking Pixels and Lawsuit Risk
A healthcare organization’s website can disclose patient information without anyone stealing a password or breaking into its network.
The Federal Wiretap Act, 18 U.S.C. 2511(1): Privacy Lawsuit Risks and How to Protect Your Website
A single line of tracking code on a website can be treated as a surveillance device.
DATA New Hampshire Wiretap Act: Privacy Lawsuits, Tracking Pixels and Business Risk
A patient searches a hospital website for a specialist. A student signs into a university portal. A customer opens a support chat.
LAW FIRMS Washington Privacy Act: RCW 9.73, Website Tracking and the Limits of All-Party Consent
On October 8, 2026, the Washington Supreme Court affirmed dismissal of a Meta Pixel claim in Baker v.
The FRIA Is Coming: Why AI Governance Must Assess Connectors, Permissions and Data Access — Not Just the Model
Most companies preparing for the EU AI Act’s Fundamental Rights Impact Assessment requirements are asking familiar questions.
Song-Beverly Credit Card Act: When Checkout Data Collection Becomes a Privacy Lawsuit
A cashier asks for a ZIP code. A payment screen asks for a phone number. An electronic receipt requires an email address,…
LAW FIRMS Potter Handy and the Rise of Mass Privacy Litigation: From Google Incognito to Data Breaches and Tracking Claims
Potter Handy occupies a very different place in the privacy plaintiffs’ bar than a lawyer such as Scott Kamber.
Ohio Wiretap Act: Website Tracking, One-Party Consent and the Privacy Lawsuits Businesses Should Understand
A website operator installs a tool to measure visits, record sessions or analyze chat conversations.