The Microphone You Forgot to Mention
There’s a moment happening in exam rooms across the country that nobody’s talking about — at least not to the patient. A person sits down across from their doctor and
May 14, 2026
No Comments
Maria “Belen” Sanzio is a Data Privacy Engineer & Specialist. She is a Buenos Aires-based Privacy Engineer dedicated to bridging the gap between legal requirements and technical execution. Currently focused on operationalizing privacy and onboarding here at Captain Compliance, she specializes in transforming complex global regulations like the GDPR and Argentina’s LPDP into scalable, automated workflows while handling integrations of DSARs, consent platforms, and privacy notices.
With a background in software engineering and a deep understanding of data lifecycle management, Maria integrates the tools that allow organizations to move beyond “checkbox compliance.” She is passionate about Privacy by Design, building robust data subject request (DSR) pipelines, and ensuring that ethics remain at the heart of the modern data stack.
Posted Articles
Maria Sanzio
“Accept All” Isn’t Consent. Latvia’s Privacy Regulator Finds Cookie Banners Not Working
Latvia’s Data State Inspectorate just published a blunt assessment of how badly most websites are handling cookie consent — and the problems they’re describing aren’t unique to Latvia. Cookie banners
May 14, 2026
No Comments
Millions of Americans Used State Health Insurance Exchanges. Many May Not Have Realized Their Data Was Flowing to Big Tech.
The next major privacy battle in the United States may not involve social media, smart devices, or AI chatbots. It may involve state-run health insurance websites. A new analysis by
May 13, 2026
No Comments
Maria Sanzio
Choosing the Right GRC Tool: What the Vendor Demo Won’t Tell You
Most organizations pick a GRC platform the wrong way. Here’s how to do it right. There’s a familiar pattern in how compliance teams end up with the wrong GRC tool.
May 13, 2026
No Comments
Maria Sanzio
Governments Want Access Before AI Launches. The U.S. and U.K. Just Moved the Industry Closer to Mandatory Pre-Deployment Oversight.
The era of governments regulating artificial intelligence after deployment may already be ending. This week, the United States and United Kingdom took a major step toward a new AI governance
May 11, 2026
No Comments
Maria Sanzio
THE CANVAS HACK IS A WARNING SHOT FOR EVERY SCHOOL IN AMERICA
The ShinyHunters breach didn’t just take down a learning platform. It exposed the catastrophic privacy debt that edtech has been building for years — and the students paying the price.
May 9, 2026
No Comments
Forbes Media’s $17.5 Million Privacy Settlement Reckoning: What Berman v. Forbes and the VPPA Case Reveal About Publisher Liability
Two lawsuits. Two settlements. Seventeen and a half million dollars. And a media company that, by all external appearances, did exactly what hundreds of other digital publishers are doing
May 4, 2026
No Comments
Enterprise Manual for Privacy Impact Assessments (PIA)
The role of a General Counsel has undergone a seismic shift. As we navigate 2026-2027 privacy changes, the traditional “compliance-as-a-cost-center” model has been replaced by a “privacy-as-a-governance” mandate. At the
May 4, 2026
No Comments
Data Privacy Debt: Why Your Compliance Program Quietly Goes Out of Date Every Quarter — and How to Stop It
Software engineers have a useful concept they call technical debt: the accumulating cost of shortcuts, legacy decisions, and “we’ll fix it later” choices that quietly tax every future release. Privacy
May 3, 2026
No Comments
The GUARD Financial Data Act Is Here. Financial Privacy Just Got Real.
For years, U.S. financial data privacy has operated under a patchwork system that made compliance complex, inconsistent, and often reactive. The introduction of the GUARD Financial Data Act changes that
May 2, 2026
No Comments
