Latest from the Privacy Desk
All dispatches →
AI When the Platform Is the Pipeline: What the Nvidia-YouTube Lawsuit Tells Us About AI’s Data Problem
There is a phrase that keeps appearing in AI litigation that I think deserves more attention than it usually gets: “without consent.”…
AI Governance 2.0: Why Having a Policy Is Not the Same as Being Protected
In 1903, the Wright brothers flew 120 feet at Kitty Hawk. By 1929, commercial aviation was booming and terrifying in equal measure:…
AI Your Data, Their Model: Connecticut Grants Consumers New Power Over AI
As the intersection of artificial intelligence and personal privacy becomes a primary battleground for regulators, Connecticut has positioned itself at the forefront…
AI Nvidia’s YouTube Scraping Lawsuit Exposes Critical Gaps in AI Training Data Governance
A new class action lawsuit filed against Nvidia Corp. and YouTube Inc. in California’s Northern District Court has thrust the contentious issue…
Third-Party Resources for AI Governance
As Captain Compliance has grown to be a leader in data privacy and compliance software we are also getting asked more and…
The Persistent Memory Problem: How AI Systems Are Quietly Building Permanent Profiles of People
For decades, privacy law has been built around a deceptively simple assumption: data is collected, processed, stored, and eventually deleted.
AI EU Commission Opens Feedback Window on Draft Guidelines for ‘Reasonable Compensation’ Under the Data Act
The European Commission has launched a short but critical public consultation on draft guidelines that will shape how businesses calculate “reasonable compensation”…
AI Unlocking Global Data Protection: The EDPB’s New Report on International Enforcement Cooperation and Lessons from Other Fields
In an increasingly borderless digital world, where personal data flows freely across continents, effective enforcement of data protection laws remains stubbornly local.
AI France and the United Kingdom Step Up Enforcement Against Nonconsensual Deepfakes
Regulators in both France and the United Kingdom have escalated actions against platforms and technologies that produce or host nonconsensual deepfake content.
Between Consent and Infringement: AI and the Collapse of Data Doctrine
Artificial intelligence runs on data. That proposition is familiar, almost banal. But its legal consequences are not.
AI Governing AI Under Pressure: What CPOs and Product Leaders Must Fix
AI governance is no longer a responsible AI side initiative. It is becoming the operating system for how high velocity product teams…
The Therapeutic Illusion: Why AI Chatbots Are Failing Mental Health—And What Regulation Must Address
A Critical Analysis of Clinical, Privacy, and Regulatory Failures in AI-Mediated Mental Health Support Introduction: The Promise and the Peril In October…