Latest from the Privacy Desk
All dispatches →Wisconsin Consumer Data Protection Act
Wisconsin has proposed the Consumer Data Protection Act (WCDPA), joining its Midwestern neighbor, Michigan, in advancing comprehensive privacy legislation.
DATA North Carolina’s Comprehensive Privacy Bill
North Carolina has consistently advanced comprehensive privacy legislation, with bills like the Consumer Privacy Act (NC-CPA) establishing a regulatory framework that is…
DATA Michigan’s Personal Data Privacy Act (SB 359/SB 659)
“The bill would enact the “Personal Privacy Data Act” to establish consumers’ rights related to the collection and use of personal data.
DATA Pennsylvania’s Consumer Data Privacy Act (HB78)
The passage of House Bill 78 (HB78), the Consumer Data Privacy Act (CDPA), through the Pennsylvania House of Representatives marks a decisive…
DATA The Massachusetts Data Privacy Act (S.2619/H.4746)
The Commonwealth of Massachusetts is on the verge of adopting a data privacy framework that could establish the most stringent consumer protections…
DATA Why “Exempt” Organizations Can’t Skip Data Mapping Anymore
Many organizations that fall outside formal regulatory requirements often assume they can postpone or skip data mapping altogether.
DATA Session Replay Technology Disclosure is Required
Session replay technology tools that record real user interactions on a website are now found across industries to improve UX, spot bugs,…
DATA Ontario Strengthens Public Sector Privacy: IPC’s Updated “Planning for Success” PIA Guide Reflects Landmark Bill 194 Changes
In November 2025, the Office of the Information and Privacy Commissioner of Ontario (IPC) released an updated edition of its flagship guidance…
When Departments Don’t Talk: The Hidden Risk in Privacy Compliance
Privacy failures rarely start with hackers—they start with silos.
OneTrust Sold in Private Equity Deal
Did Captain Compliance just buy OneTrust the Atlanta-based “trust intelligence” platform that helps enterprises manage privacy, AI governance, security and ethics company?
DATA Who Really Owns Privacy in Your Organization? The Strategic Placement Debate
Every general counsel I’ve spoken with recently faces the same uncomfortable question during board meetings: “Who actually owns privacy here?” The awkward…
Global Privacy Enforcement Network (GPEN)
There’s the IAPP and Future of Privacy Forum but one group has stood out recently.