Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
Latest from the Privacy Desk
All dispatches →Salt Typhoon Hack and the Growing Shadow Over U.S. Data Privacy
The revelation that Chinese state-sponsored hackers behind the “Salt Typhoon” operation may have accessed data on virtually every American adult has sent…
Dior Punished in China Over Unapproved Data Transfers: A Wake-Up Call for Global Brands
French luxury powerhouse Dior has been penalized by Chinese regulators for the unauthorized transfer of Chinese customer data overseas.
CALIFORNIA PRIVACY – CPRA Enforcement Escalates on GPC Non-Compliance With Privacy Sweet in CA, CO, and CT
The California Privacy Protection Authority has additional privacy sheriffs helping to bring fines to businesses not complying with Global Privacy Control.
GDPR CJEU Delivers Landmark Ruling: Pseudonymized Data’s Status Under GDPR Hinges on Identifiability, Not Absolute Anonymity
In a pivotal decision that could reshape how organizations handle data privacy in the European Union, the Court of Justice of the…
DATA Data Subject Access Request Response Letter Help
You don’t respond to a Data Subject Access Request (DSAR) with a file dump and a shrug.
GDPR The Hidden ROI of Data Protection: CNIL’s Eye-Opening Study on the DPO’s Economic Edge
Data Protection Officers add a huge economic benefit in the trust, safety, and optics of a business.
DATA Oregon’s One-Year Enforcement Report
In the patchwork of U.S. data privacy laws, Oregon’s Consumer Privacy Act (OCPA) stands as a significant milestone in empowering residents to…
DATA Global Data Privacy Laws: A Comprehensive Overview of Legislation For Every Country
As an update to our smaller breakdown of Global Data Privacy Laws we now have included every country listed in alphabetical order…
How C2PA Rewires Trust—And Why Privacy & Identity Are the Real Test
The C2PA framework (often surfaced to users as Content Credentials) doesn’t “detect deepfakes.” It attaches verifiable provenance—who did what, when, and with…
AI “AI Plus” Goes Live: China’s New Blueprint for AI—And a Nationwide Law to Label AI-Generated Content
China’s State Council has launched an “AI Plus” plan to weave AI into the real economy—manufacturing, healthcare, finance, public services, and more.
Anonymity at the Gate: The New Age-Verification Wave in the U.S. — and What the U.K. Just Switched On
This explainer builds on the recent regulatory changes in the UK and USA around age-verification’s rise and places it in legal context,…
GOVERNANCE RISK AND COMPLIANCE Why Disney Owes $10M: Mislabeling Kids’ Videos on YouTube
The Federal Trade Commission announced that The Walt Disney Company agreed to pay a $10 million civil penalty and adopt new compliance…