Privacy law, enforcement and technology—coverage for everyone in the privacy field.
Practical analysis of privacy litigation, website tracking, AI governance, global regulation and the technology organizations use to manage risk.
AI When the Attacker Is an Agent: What AI-Orchestrated Intrusions Mean for Security, Privacy and the Board
For most of the last decade, the speed limit on a cyberattack was the attacker’s own staff.
Latest from the Privacy Desk
All dispatches →
AI Most Companies’ AI Risk Comes From Tools They Bought. A Practical Plan to Manage It
Most of the public debate about AI regulation is about the companies that build frontier models.
AI Ottawa Bets CAD 1.6 Billion on Cohere. Sovereign AI Still Comes Down to Your Contract
Canada has decided that where its AI runs, and who controls the data flowing through it, is a question of national policy.
AI Canada’s Privacy Regulators Wrote the Health AI Audit Checklist Before the Law Exists
Canada’s privacy regulators have put the health sector on notice that artificial intelligence will be judged by the same privacy rules as…
LAW FIRMS Leak-Site Listings of Law Firms Jumped 39%. Why Outside Counsel Belongs in Your Vendor Risk Program
Criminal extortion groups publicly named 455 legal organizations on their data leak sites in the year to August 2026, up 39 percent…
AI AI Can Now Write Proofs That Code Won’t Crash. Here’s What “Formally Verified” Does and Doesn’t Promise
The same AI systems that have become good at finding software flaws are now being pointed at a harder job: proving that…
AI SB 53 and the TDTA: California’s Two AI Transparency Laws Ask Very Different Questions
California now has two AI transparency laws on the books that are often mentioned in the same breath and almost never apply…
COMPLIANCE GM’s Three Settlements Show Why Privacy Laws Make Consumer Protection Enforcement Hit Harder
When General Motors agreed on October 29, 2026 to pay $220 million to 36 state attorneys general, most of the coverage, including…
AI When an AI Company Goes Bust, Who Gets the Conversations? Bankruptcy Law and Chatbot Data
When a company goes bankrupt, its assets are sold to pay its creditors.
AI Quantum Was the Deadline. Now Regulators Are Asking Whether AI Gets to Encryption First
For a decade, the threat to encryption had a name and a rough date: a large quantum computer, probably in the 2030s.
GDPR The EDPS Sets Its Terms for Sharing EU Border Data With the US
The European Data Protection Supervisor has warned again that sharing border and visa data with the United States must come with safeguards…
COOKIES The Fnac App Asked, Users Said No, and the Tracker Kept Running: Inside the CNIL’s €7 Million Fine
France’s data protection authority, the CNIL, has fined two Fnac companies a combined €7 million over a tracker in the retailer’s mobile…
GOVERNANCE RISK AND COMPLIANCE Europe’s Cloud Sovereignty Fight Gets a Hearing: What the EPP’s CADA and Chips Act Session Means for Data
The European People’s Party group in the European Parliament will hold a hearing in Brussels on November 18, 2026, on two files…