Latest from the Privacy Desk
All dispatches →AI Scribes in Mental Health Care: Consent Theater, HIPAA Gaps, and the Privacy Crisis Hiding in Plain Sight
There is a recording device in your therapist’s office.
Privacy Regulation in the Age of AI: Experts Call for Radical Shift from Consent to Institutional Accountability
In March of this year, Carnegie Mellon University’s Block Center for Technology and Society convened a group of interdisciplinary experts to grapple…
Agentic AI Is About to Turn Payments Into a Compliance Minefield
Agentic AI is being sold as the next evolution of online shopping.
AI Meta Removes Hidden Facial Recognition System From Smart Glasses App After WIRED Investigation
Meta quietly embedded an unreleased facial recognition system into a companion app for its smart glasses — and just as quietly removed…
You Trust Your Chatbot With Everything. Should You? How AI Providers Extract and Handle Your Conversations
We pour our hearts out to AI chatbots. Health worries, financial secrets, relationship troubles, creative ideas, and even legal strategies flow freely…
AI GDPR Compliance When Using Claude Enterprise
A question spreading across compliance forums right now cuts straight to the heart of how modern businesses are deploying AI tools: if…
AI White House and Congress Revive Push to Block State AI Laws
The federal fight over artificial intelligence regulation is back.
AI Medical Records, AI Platforms, and the Legal Protection That Vanishes at Upload
When a patient downloads their medical records and uploads them to ChatGPT to ask about a diagnosis, something legally significant happens at…
AI AI Connectors, Insider Risk and the Data Flows Nobody Is Mapping
Most privacy programs are built on a foundational assumption: data flows are known, mapped and controlled.
Three States Push Bold New Frontiers in AI Regulation and Privacy Protection
As artificial intelligence continues to evolve at breakneck speed, U.S.
AI AI Disclosure Requirements: The Complete Guide for Businesses Using Artificial Intelligence
A client recently asked a question that sounds simple but opens up an entire compliance landscape: “Do we need to add a…
From Privacy Policies to Machine-Readable Governance: Rethinking Data Control in the Age of AI
The privacy notice was never designed to be read by the systems it governs.